last executing test programs: 2m47.701403478s ago: executing program 0 (id=1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r1, 0xfffffe4d}}, 0x48) 2m46.651114993s ago: executing program 0 (id=11): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x5, &(0x7f0000000100)}) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) kexec_load(0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002580)={0xffffffffffffffff, r2, 0x4, r1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x12000000, 0x0, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000180)=0x80000004, 0x4) mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff) fcntl$setlease(r1, 0x400, 0x3) 2m46.214083166s ago: executing program 0 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@block_validity}, {}, {@bsdgroups}, {@norecovery}, {@inlinecrypt}, {@noinit_itable}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(r3) r5 = openat(r1, 0x0, 0x1, 0x100) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, 0x0) fallocate(r2, 0x20, 0x4000, 0x3000000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0x7a, 0x85, &(0x7f00000001c0)="b855ee83639787b7430d3d2dda586b036db943e096514e951e250e43478a6e8d23d6b0349effd98e7f70f7c734880a36ced922eaf5775fa0f0de5d50c7f82c6d87d912fd7f5cc6a4389fb224006e284287a3468038f10eb7cf55a4a8807f280bd1687dd115443fdc6434d8c66327b504e565b783db39f51747de", &(0x7f0000000600)=""/133, 0x8, 0x0, 0x9b, 0xc, &(0x7f00000006c0)="6a3a537698044aed3dbed1beab822496c2830ab1c1a2896718af5ebbcce00266ad4f4a02a7b748264fea07bf54a25890ed8523bd5f45853de08fbb4303e2d53539a1556a8484f7be749d2e004cbf0cb67cc4ef6d0cf820fb49f5744885e47934a6cd0e547f537896a7dab18405ea63e8b646b2af85469dc2998283d618922abc8ac3f460dec69b0574e0fc3baa99a13cba478b00138aec154c14c3", &(0x7f0000000780)="26f3e5dbdd29959591e87d60", 0x1, 0x0, 0x5}, 0x50) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) read(r6, &(0x7f0000001400)=""/4096, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getsig(0x4202, r7, 0xfffffffffffff000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006308000240000000160900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000ab1e3401c628a1417eb9ef863ea8bbdb80100000006a54dcdc21e7f6a757355c85961bc63a688cdff6a65c1ebcd4d84319a2343b6ee917ef4cccb6c080d1df1ed816dd3675af0dda8a670779b9652ca9c2910ed4e3466f94ef18832e9b7a51e"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000c12, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xee00}}, {@map_off}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x4d59b1d3}}, {}, {@dmode={'dmode', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@check_strict}, {@mode={'mode', 0x3d, 0x921}}, {@unhide}, {@showassoc}, {@overriderock}]}, 0x3, 0xa3d, &(0x7f0000001440)="$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") syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r6) 2m44.950277938s ago: executing program 0 (id=18): unshare(0x22020600) syz_clone3(&(0x7f0000000080)={0x180801600, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) pipe(0x0) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x3, &(0x7f0000000580)={@rand_addr, @dev, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv4_getnexthop={0x58, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r7}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040001) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, 0x0) getpriority(0x3, 0x0) 2m36.573704497s ago: executing program 0 (id=46): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000003c0)=""/4096) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r3, &(0x7f0000001200)=""/244, 0xfffffc9c) 2m36.538792993s ago: executing program 32 (id=46): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000003c0)=""/4096) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r3, &(0x7f0000001200)=""/244, 0xfffffc9c) 1m39.551145942s ago: executing program 1 (id=396): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000200000a000000b000fd00000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) 1m39.461139657s ago: executing program 1 (id=399): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb, 0x0, 0x0, 0x7}, 0x0, 0xffeffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe009fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40040) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="afc3", 0x2}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000203010200000000000000000500000508000340000004000800054000000002080001000400000609000200fffeff0912286500"], 0x38}, 0x1, 0x0, 0x0, 0x9}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000420000000600000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) r5 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m37.94713703s ago: executing program 1 (id=408): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000fc0)="$eJzs3EFII1cYwPHPGGMSa5JDaWmh+Ggv7WXQtOfSUBRKAxU1pVoojDppQ6aJZIIlpVQ97XXZ+54W9iAevQm73vbkZW+7sOxlb14W9qCHZWfJZMYkY4wxRuIm/x/IvLz3Pue9mRf4ZsjM8W93/85nLS2rlyUQVvKRiMipSEIC4hlxtwGnHJJG2ycy8ebZF4vLKz+n0unZBaXmUkvfJpVSsalH//wXcbsdjMtR4o/j18lXR58cfXb8bumvnKVylioUy0pXq8WXZX3VNNR6zsprSs2bhm4ZKlewjFKtvVhrz5rFjY2K0gvrk9GNkmFZSi9UVN6oqHJRlUsVpf+p5wpK0zQ1GZX2Xjy5pMMQyOwuLOipLoPXejwY3JBSKaWPikjkXEtmty8DAgAAfeXP/wMi21fK/+UbN/+XmJP/VzvX8/+9Lw/LE7/ux9z8/yDUKv//7nntfzXl/2ER6Sb/vy8d5v/SMiMaLtfK/3E7TIXOVY00farm/1H3++vY+X1v2imQ/wMAAAAAAAAAAAAAAAAAAAAA8CE4te24bdtxb+v91R8hcD9jIF10/sdFJFw9+zbnf5AtLq9I2HlwLxgTMe9sZjYzta3b4VBETDFkWuLy1lkPrmrZe/JIVSXksbnlxm9tZkadllRWck78jMQl4Y+37bmf0rMzqsaNP3tMKdoYn5S4fNw6Ptkc7+4/JF9/1RCvSVyerklRTFl31nU9/v8ZpX78Je2Ljzj9AAAAAAAYBJo60/L6XdMuaq+9ZeTs+rrl/YHa9fV0y+vzYPzzYL9nDwAAAADAcLAq/+Z10zRKbQoRubxP94VgZ51Dvpqxdp1HG2bY6XhCzu9dRHxNARG50rwedHhUmwreDymamsJuZXeH15t/z87XdvNh6SAq6B/8VLVCXXc83m2j0AXHWebPRwXarISxnq3nT+89POndF+T7fW8FXN55p9t9hf2rzimMuTvmDh0AAAAwQOpJv1fzQ2PzSF8GBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkLmRV/r5Cv2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBbvA8AAP//KbT7SA==") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) renameat2(r4, &(0x7f0000000680)='./file0\x00', r4, &(0x7f0000000940)='./file0/file0\x00', 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf5019, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0xfff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x2b00001, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x400003}) writev(r6, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c00bb773975f9b750d9030a1ec2875b04bf6b12e3e6ccb1f413117b61f0939bba877be24ccfebc1d6c7cef137549d5d53fcbf7f87904c7b74cccf57181acb1bad1fa775cba52a1e52b126f8141afda76391ab9d7bc660594c8ade3a30abfe5f6e81dd421964fcdda53c8ebde0a17bc297620057e5acbdc3d8e702147239b71bd33871dd1a4687b1fe26c7f556dd5d593e56a77d9e96c0341a5a"]) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x8000, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x7e1}, 0x20, 0xfffd, 0x21382424, 0x0, 0x5, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r9, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010029bd7000fddbdf25090002002f797a320000000008004100727865001400330076657468305f746f5f626174616476"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 1m35.776607292s ago: executing program 1 (id=419): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x0, 0xffffffffffffb2e9}, 0x119b10, 0x8, 0xe, 0x9, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="08000600a75d6e1e213a082e070000000000000032752efe0593f0905dfe503f11c7d502ac8b85c70709d90aa3a25069468d69"], 0x24}}, 0x4000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socket$netlink(0x10, 0x3, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @rand_addr=0x64010102, @empty}}}}) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000002380)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") r8 = dup(r4) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800710, &(0x7f0000000580)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@norecovery}, {@dax_inode}, {@noblock_validity}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@nomblk_io_submit}, {@sysvgroups}, {@resgid}, {@sb={'sb', 0x3d, 0x8d46}}, {@dioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x7a}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001e0605000000000000000000050000020900020073797a31000946528c00020073797a31000000000501000700000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) lseek(r0, 0x2000, 0x0) 1m34.052708891s ago: executing program 1 (id=426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, r3, 0x920, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x2}, {0x80, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x5e, 0x4}, {0x8, 0x6}], "e6fbed8a448c2e75"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xa}, {0x6, 0x4}, {0x9, 0x3}, {0x9, 0x5}, {0x56, 0x5}, {0x7, 0x7}, {0x8, 0x2}, {0x81, 0x1}, {0x7, 0x1}, {0x40, 0x6}, {0x1, 0x3}, {0x3, 0x2}, {0x19, 0x6}], "2b1efddb5457558f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xfb}, {0x0, 0x4}, {0x25}, {0x0, 0x1}, {0xf3, 0x2}, {0x3, 0x6}], "a9e3104a91fa5818"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xfc, 0x6}, {0x7, 0x3}, {0x0, 0x1}, {0xfa, 0x3}, {0xf7, 0x7}, {0xff, 0x2}, {0x62, 0x5}, {0x10, 0x4}, {0x5, 0x6}, {0x7, 0x6}, {0x7, 0x4}, {0x9}, {0x8, 0x6}, {0x40, 0x5}, {0x8, 0x1}, {0xa}, {0x0, 0x4}, {0x5, 0x3}], "e5e4e08de90a7cae"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xfb, 0x7}, {0x7f, 0x2}, {0x6d, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x5e, 0x6}, {0x1b, 0x7}, {0x21}, {0x7, 0x1}, {0x7a, 0x3}, {0x9, 0x3}, {0x3, 0x6}], "e4bb5109c048ec0a"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x6}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x4}], "5a49a5030e454b8b"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xfa, 0x1}, {0xff, 0x3}, {0x9, 0x7}, {0x9, 0x5}, {0x80, 0x5}, {0x40, 0x5}, {0x7f, 0x4}, {0x4, 0x7}, {0x0, 0x2}], "6f979144e536b36e"}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20) unlink(&(0x7f0000000280)='./file1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x1848ade0}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) 1m32.472770815s ago: executing program 1 (id=438): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x6000, 0x8, 0x0) fchownat(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000) setregid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="974501000000000001008cc5ffffffff0a30aec2d624d4983570946b", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0xc0) 1m28.761541054s ago: executing program 3 (id=451): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x2}, 0x8) 1m28.679916798s ago: executing program 3 (id=453): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000fc0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000940)='./file0/file0\x00', 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf5019, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0xfff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x2b00001, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x400003}) writev(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c00bb773975f9b750d9030a1ec2875b04bf6b12e3e6ccb1f413117b61f0939bba877be24ccfebc1d6c7cef137549d5d53fcbf7f87904c7b74cccf57181acb1bad1fa775cba52a1e52b126f8141afda76391ab9d7bc660594c8ade3a30abfe5f6e81dd421964fcdda53c8ebde0a17bc297620057e5acbdc3d8e702147239b71bd33871dd1a4687b1fe26c7f556dd5d593e56a77d9e96c0341a5a"]) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x8000, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x7e1}, 0x20, 0xfffd, 0x21382424, 0x0, 0x5, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r8, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010029bd7000fddbdf25090002002f797a320000000008004100727865001400330076657468305f746f5f626174616476"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 1m25.743698368s ago: executing program 3 (id=466): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0xfffffffffffffdfa) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x6, 0x4, 0x80006) tkill(0x0, 0xf) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) getcwd(0x0, 0x0) 1m25.694055117s ago: executing program 3 (id=477): syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@hopopts={0xc, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x3b5, 0xfffffff9) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000240)=0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000140)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000100)={@multicast, @random="f536c528c2da", @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}], @ipv4=@tipc={{0xb, 0x4, 0x0, 0x1f, 0x5e, 0x68, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, {[@timestamp={0x44, 0x18, 0x82, 0x0, 0x5, [0x2, 0x9, 0x6, 0x1, 0x2]}]}}, @payload_named={{{{{0x32, 0x0, 0x1, 0x0, 0x0, 0xa, 0x2, 0x2, 0x1000, 0x0, 0x3, 0x0, 0x3, 0x2, 0x4, 0x6e18, 0x2, 0x4e24, 0x4e23}, 0x1, 0x2}, 0x3, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f00000001c0)={0x1, 0x3, [0x73d, 0x1ba, 0xdd3, 0xbe6]}) mount$bind(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x1000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x280100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) 1m25.164987925s ago: executing program 3 (id=469): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128019000100766c616e000000000c00028006000500810000000a33cc9cea4d1d89ed2075000100a2aaaaaa05000000"], 0x48}, 0x1, 0x0, 0x0, 0x402c015}, 0x8010) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000240)='./file1\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r1 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) utimensat(r1, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) 1m24.754770883s ago: executing program 3 (id=471): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$TIOCSIG(r0, 0x40045436, 0x1a) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) r5 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ftruncate(r0, 0x7fffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 1m24.697364683s ago: executing program 33 (id=471): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$TIOCSIG(r0, 0x40045436, 0x1a) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) r5 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ftruncate(r0, 0x7fffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 1m17.445444544s ago: executing program 34 (id=438): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x6000, 0x8, 0x0) fchownat(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000) setregid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="974501000000000001008cc5ffffffff0a30aec2d624d4983570946b", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0xc0) 7.033303415s ago: executing program 6 (id=1152): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000080)=""/205, 0xcd, 0x0, &(0x7f0000000200)=""/138, 0x8a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x1, 0x8) (rerun: 32) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 6.859933424s ago: executing program 6 (id=1153): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, &(0x7f0000000040)={0x0, 0x1d, 0x0, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@errors_remount}]}, 0x1, 0x53a, &(0x7f0000002400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) truncate(0x0, 0x8da6) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_open_procfs(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8c3b06818f92715f, 0x0) 6.839133568s ago: executing program 6 (id=1154): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = memfd_create(&(0x7f0000000280)='\x00', 0x4) lseek(r0, 0x8, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x2000000000000216, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="dec2fed66fce466ce70fc1b3667f60e680450d87dd3e3b67d736c40423fde049b1587760ebe15d82ce21814d727537fc3eb561196682a8c7b62008aeb4be8bcc009a762d95088f555fc9ffe0b88edece58cece6833969160fc9d8258a138fd9e0d54b74e44c39f3f4a0e974c1f50ec9e51f11d71b0f0b3d72c3a8c91f776dfe944ba20c76cc2c4f8d74d10ba0307a6f495145ffd1bee4fa183af5f77eca188c6493c82b44d80ce4998c833b276b16776c41873b27f263d1ef7e945907f2f39592ec2d8784a41bf59049ac7199900632f2d84f9bd5379399257e4f5b0f03c277215865cb16a3f5852af4f07b84c3930a4bea0564eb3d52550dcf8cf5c006740d6a68426c8b0e1b892c5a82bbcdbe5954e8832d333a02a8de5f78c198394853b77da1bdce890bb4916f1ee612700476a67117a27afc2b47b570f0f0c58566170e6ecb046d92781e3706e25030f59e4fd675be11c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2060a0, &(0x7f0000000180)={[{@max_dir_size_kb}, {}, {@sysvgroups}, {@norecovery}, {@quota}, {@barrier}, {@nogrpid}, {@noauto_da_alloc}, {@noload}, {@mblk_io_submit}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") 2.436762674s ago: executing program 4 (id=1188): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) io_uring_enter(0xffffffffffffffff, 0x7b1d, 0xe891, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000000)={0x5, 0x6}, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000080)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}], [{@subj_role={'subj_role', 0x3d, 'nodelalloc'}}, {@fsname}]}, 0x3, 0x458, &(0x7f0000000300)="$eJzs27tvHEUcAODfrh8hL2xCeOQBGALC4mHHToAUFIBAogAJiSaUJnaiECdGsZFIhEhAKJQoEhUNokTiL6CCBgEVEi30CCmCNERUh/Z21/fIPYi584Xc90nrm9nHzczNzN3MjjeAoTWV/UkidkTELxExkUcbT5jKX65drVzId1Yqr/+RVM/76+p7x8pTy+u2F5HpNCL9KIl9LdJdPXf+1MLy8tLZIj67dvrt2dVz5588eXrhxNKJpTPzR44cPjT3zNPzT/WknHdked37/sr+PS+/cfnVY0cvv/nDV0lZ/qZy9MhUp4OPVCo9Tm6wdtaFk9EBZoQbMhIRWXWNVfv/RIxErfIm4qUPB5o5oK8qhTaHL1aAW1gS9bHxGFxOgM1V/tBn899y27zRx+BdeT6fAGXlvlZs+ZHRSCOfGGVzo37N1qci4ujFvz/PtujPfQgAgAbfZOOfJxrHf39Wj6Rxd915txdrQ5PFWsquiLgzInZHxF0R1XPviYh7m94/7ZJ+8yLJ9eOftK+rCdn479nq2lbz+G8955MjRWxnNTKWHD+5vHSw+EymY2xLFp/rkMa3L/78Sbtj9eO/bMvSL8eCRT5+H93SeM3iwtrCfylzvSsfROwdbVX+ZH0lIImIPRGxd4NpnHzsy/3tjjWXv5J0eqfnGqM9aBmVLyIezev/YjSVv5R0Xp+cvS2Wlw7Olq3iej/+dOm1dul3r//+yup/W8v2v17+yaR+vXb1xtO49OvHbec0Mxtq/7Ud48Xruwtra2fnIsaTV/JM1++fr11bxsvzs/JPH2jd/3dF7ZPYFxFZI74vIu6PiAeKunswIh6KiAMdyv/9Cw+/1e7YzVD/i031P9l4SlP91wLj0byndWDk1HdfN75jLfjvvv8OV0PTxZ5u339lm+iWr421ZgAAAPj/SSNiRyTpzHo4TWdm8v/h3x3b0uWV1bXHj6+8c2Yxf0ZgMsbS8k5Xfj84vx86V0zry/h8U/xQcd/405Gt1fjMsZXlxUEXHobc9jb9P/PbyKBzB/Sd57VgeOn/MLz0fxhe+j8Mrxb9f2uXS8b6lRdgc7X6/b9QC1YmNjMzwKZq6v+W/WCImP/D8NL/YXjV9/+Oz98Dt5LVrdH9IXkBgesCkd4U2ehNIKn1gs+iD0nsGHQBbzww6G8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgnAAD//2Gb4I4=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x621c2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) 2.240061756s ago: executing program 4 (id=1189): set_mempolicy(0x1, 0x0, 0x7582) syz_clone(0x312000, 0x0, 0xfffffffffffffea6, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 2.223611299s ago: executing program 7 (id=1190): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.221504829s ago: executing program 4 (id=1191): r0 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000000b180), 0xa0140, 0x0) r1 = inotify_init1(0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48001) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r2 = socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x1c) socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2.177652957s ago: executing program 7 (id=1192): socket$kcm(0x2d, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000680)={[{@map_off}, {@check_relaxed, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@showassoc}, {}, {@block={'block', 0x3d, 0xa00}}, {@check_strict}], [{@uid_gt}, {@context={'context', 0x3d, 'user_u'}}]}, 0xfa, 0x6bb, &(0x7f00000015c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x5, &(0x7f0000000100)=[{0x2, 0x6, 0x9, 0x7}, {0x1086, 0x1, 0xe4, 0xa23}, {0x401, 0x9, 0x40, 0x10001}, {0x8, 0x3, 0x8, 0x24d}, {0x8, 0x5e, 0x9, 0x80000000}]}) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.042933899s ago: executing program 7 (id=1193): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) set_mempolicy(0x4005, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'dvmrp0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @remote, 0x9}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20040001) 1.840537103s ago: executing program 4 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r7, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x4c000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @local, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 1.771760725s ago: executing program 4 (id=1195): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vlan1\x00', @random="776c0212d0f6"}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x10, 0x1) renameat2(0xffffffffffffffff, &(0x7f0000001fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000003000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fdatasync(r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x69, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x7f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x4) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000003139e852f3090cd5b80b2333ca06c33bcfbcde3a49329baeb0178f6b3fe926b4c5f1b3705bc6a226551e5608782b4257839a22cd008ed266097682ebc1f00fb58e57dfd3465007070404a32914eb4cd8b98a42149b3b43e6aa98e220127f1638ecedf84bc61a40dfe773305639d1224ad3f4598c5437cde8db6750e52da5000000000000db6542b1c0d04662a9722c5993e09836f32a41b5954612"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)=""/122, 0x7a}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/146, 0x92}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x7}, 0x201}], 0x1, 0x20, 0x0) 1.751070288s ago: executing program 6 (id=1196): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="aa663c3226f8cb", 0x7, 0x4048881, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r0) 1.750273148s ago: executing program 6 (id=1197): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[@ANYRESOCT=r4, @ANYRESDEC, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8=r4], 0xb, 0x0, &(0x7f0000000000)) renameat2(r4, &(0x7f0000000680)='./file0\x00', r4, &(0x7f0000000940)='./file0/file0\x00', 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf5019, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0xfff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x2b00001, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x400003}) writev(r6, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c00bb773975f9b750d9030a1ec2875b04bf6b12e3e6ccb1f413117b61f0939bba877be24ccfebc1d6c7cef137549d5d53fcbf7f87904c7b74cccf57181acb1bad1fa775cba52a1e52b126f8141afda76391ab9d7bc660594c8ade3a30abfe5f6e81dd421964fcdda53c8ebde0a17bc297620057e5acbdc3d8e702147239b71bd33871dd1a4687b1fe26c7f556dd5d593e56a77d9e96c0341a5a"]) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x8000, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x7e1}, 0x20, 0xfffd, 0x21382424, 0x0, 0x5, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r9, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010029bd7000fddbdf25090002002f797a320000000008004100727865001400330076657468305f746f5f626174616476"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 1.726521142s ago: executing program 7 (id=1198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c000000b7080000000000007b8af8ff00000000b7080000068000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70700000000000000000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x23, &(0x7f0000000280)='j\x00'/14, 0x0, 0x200008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @loopback}, &(0x7f0000000080)=0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1d, 0x3, 0x1) unshare(0x40400) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f00000002c0)="90d825a9353b1282fbb80ba285da28b1c302801779c4de902dd689dfefec07956b80d79fa3c1d5f2875235be001551e0e477b5104cfbc25c0d080f4f44952f8e869016e2aeee4053f269cc581181c40df389286fde1523f01ed39b9d44de62f6117238df4c6efbdd6113e10b8aef9927a51d1605b6a34e31fb91446dcc5633a75b484fc76e7d7afcae31e285c8c400056305e9b38903b9a8bd3b61dada5f1e5d1232f1b89a17bd92321088d5", 0xac) setsockopt$MRT_ADD_VIF(r4, 0x65, 0xca, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) 1.631987728s ago: executing program 7 (id=1199): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r6, 0xfffffe4d}}, 0x48) 1.461163097s ago: executing program 5 (id=1201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) io_setup(0x6, &(0x7f0000000680)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x104041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000280)={&(0x7f0000000240)=[{0x4, 0x4, 0xf797bd68ecc14f8e}, {0x0, 0x4, 0x2}], 0x2, 0x10, 0x6d, 0x7266}) r4 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r1, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe4, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_TESTDATA={0xba, 0x45, "1740eccbe0d5291b85ee3a8bdb1e4328e2899de8eafcc169d2e53d7e982bdb49fe35fce711e507d4646d60705c1d411bd167d89c97fac7b611b85cc8879162b38f6164c282dc31623b99dee67e5f821870aa213519750a4a1c13c2d8f54fc6c5794632fbac6acb6ef9fcd66adb999a35b17576f4d8270edd17b92bddf90dc308e6685ab73bb8628b6bb7a30055c8e0fa8705641d3ab07b1e414338f7ceadd3388dd1655f86a34aa194c8b50f6404e3e4835acb81d02a"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4c880}, 0x4004004) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) close(0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c001680"], 0x30}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYBLOB="d36989cb01d1513a1c7fd4e8ebf09b4538d12b6ac77da1681d6f9c46128da61dbdda081b778b6e987cd38a5ff5ba3d8519054f6968b303dab7f24d5a82094bf9911c8dd0d07e0d83bf0f20761cd09d5e731f5c982720155fa341e6f675aeaec251ecbe93e7e1bf1c3d42ed97e5eac1d2abf272", @ANYBLOB="010025bd7001fcdbdf25390000348d59042ed2eb53d958000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) ioctl$TIOCSTI(r9, 0x5412, 0x0) ioctl$TIOCSTI(r9, 0x5412, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req={0x3, 0xd30, 0x5, 0xa}, 0x10) 1.263575059s ago: executing program 5 (id=1205): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) sched_getaffinity(r1, 0x8, &(0x7f0000000040)) 1.047966006s ago: executing program 5 (id=1207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="aa663c3226f8cb", 0x7, 0x4048881, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r0) 1.047404276s ago: executing program 5 (id=1208): r0 = socket$packet(0x11, 0x3, 0x300) symlink(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x1000) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x201000, 0x0, 0x109, 0x0, 0x8000}, 0x1c) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0x3}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000100)=""/208) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00'], 0x30}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r3, 0x4b63, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000400)={0xa, 0x10, 0x62, 0x6, "aedde4ee9430dec7aff1ea6b783fce8aa31730fd404957d91ade71649f75d8c9"}) chmod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0/../file0\x00', 0x15) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x7, &(0x7f0000000200)=[{0xfffa, 0x4, 0x3, 0xffffa817}, {0x9, 0x0, 0x4, 0x697e4411}, {0x6, 0x7, 0x9, 0x44}, {0x0, 0x4, 0xf8, 0x8}, {0xef, 0xc, 0xd, 0x5}, {0x9, 0x5, 0x7, 0x1}, {0x4f4, 0x9, 0x40, 0xfffffffa}]}) 988.061305ms ago: executing program 5 (id=1209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 910.040788ms ago: executing program 4 (id=1210): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 832.313562ms ago: executing program 5 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r6, 0xfffffe4d}}, 0x48) 728.847789ms ago: executing program 7 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:', @ANYRESDEC], 0x11) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0xb18, 0x0, 0x12, 0x600, 0x0, 0x202, 0xa48, 0x2e8, 0x2e8, 0xa48, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x948, 0x978, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2, 0x0, {0x3}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0xffff8001, 0x2}, {0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x65, 0x3}, {0x9, 0x1}, {0x33d8786a, 0x1}, {0x2, 0x2}], [{0x7, 0x8c}, {0x1, 0x5}, {0x3ff, 0xda}, {0x5, 0x80000000}, {0x6, 0x1}, {0x5, 0x3}, {0x9037, 0x8}, {0x1000, 0x1}, {0x7, 0x7ff}, {0x7}, {0x7, 0x4}], 0x7, 0x1}, {[{0x1, 0x3}, {0x80000000, 0x2}, {0x81, 0x3}, {0x8, 0x1}, {0x3}, {0x8, 0x1}, {0x5, 0x3}, {0x6ec7, 0x1}, {0x1, 0x2}, {0x9}, {0xffffffff}], [{0x0, 0x8000}, {0x1, 0x51}, {0x800, 0x1}, {0x40, 0xfffffffe}, {0x1, 0x400}, {0xffffffff, 0x4}, {0x1, 0x2f}, {0x6, 0xe3}, {0x5, 0x2336}, {0x2, 0x7fffffff}, {0x3, 0x100}], 0x2, 0x5}, {[{0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x401}, {0xffff, 0x2}, {0x80, 0x3}, {0xc, 0x1}, {0x7, 0x2}, {0x4}, {0x8, 0x1}, {0x84, 0x2}], [{0x2, 0x48ea5d6a}, {0x6, 0x1}, {0x5, 0xf7}, {0xc}, {0xab, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x67, 0x5}, {0x40, 0x6}, {0x1800, 0xd}, {0x1ff, 0x8d6}], 0x7}, {[{0x6, 0x2}, {0xfffffff9}, {0xc}, {0x8, 0x1}, {0x8, 0x3}, {0xf, 0x1}, {0xe00}, {0x7fffffff}, {0x7, 0x2}, {0x5, 0x1}], [{0xe, 0x80000000}, {0x1, 0x9}, {0xea, 0x5}, {0x6, 0x5}, {0xa, 0x1}, {0x8, 0x8}, {0x8, 0x1}, {0x401, 0x2}, {0xfff, 0x9}, {0xb, 0x9}, {0x9, 0xffff}], 0xb, 0x4}, {[{0x585b, 0x2}, {0x800, 0x2}, {0x80, 0x1}, {0x6, 0x1}, {0x8001, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x100}, {0xfff, 0x3}, {0x1}, {0x8001, 0x1}], [{0x6, 0x8}, {0x7f, 0x5}, {0x6, 0xf}, {0x3}, {0x2}, {0x80000000, 0x4}, {0x400, 0x6de0}, {0x8, 0x9}, {0x7, 0x800}, {0x98f, 0x10000}, {0xa9, 0x7}], 0x6, 0x9}, {[{0x8}, {0x81}, {0x0, 0x3}, {0xb, 0x3}, {0x2, 0x1}, {0xd7, 0x1}, {0x8, 0x3}, {0xf8a9, 0x3}, {0x5}, {0x0, 0x3}, {0x8, 0x2}], [{0x67c4, 0x8b}, {0xeb2, 0x1}, {0x0, 0x7ff}, {0x2, 0x9}, {0x3, 0x3}, {0x81, 0x8cc2}, {0xd, 0x200}, {0x2, 0x7}, {0x4, 0x800}, {0x7, 0x1d}, {0x9, 0x40}], 0x7, 0xb}, {[{0x6, 0x2}, {0x207, 0x2}, {0x0, 0x1b385c99f5cbecae}, {0x10000, 0x1}, {0x65593b7e, 0x2}, {0xdd}, {0x1, 0x2}, {0x4, 0x3}, {0x8, 0x1}, {0x6, 0x2}, {0x4, 0x2}], [{0x2, 0x2}, {0x5, 0x8}, {0x478f, 0x6}, {0x5cc0, 0x3}, {0x967, 0x3}, {0x0, 0x9}, {0x4, 0xfffffffb}, {0x800, 0xffffffff}, {0x81, 0xffff}, {0x6, 0xc}, {0x101, 0x7}], 0x7, 0x5}, {[{0xfffffffd, 0x3}, {0x3, 0x2}, {0xfffffffd, 0x3}, {0x9}, {0x5e84, 0x2}, {0x0, 0x1}, {0x4c2}, {0x8b6a, 0x2}, {0x10, 0x3}, {0x8001, 0x3}, {0x5, 0x3}], [{0x1, 0xc}, {0xf33, 0x8}, {0x6, 0xffffff01}, {0x3, 0x4}, {0x9, 0x66}, {0xb, 0x5}, {0x0, 0xf6c9}, {0x0, 0x4}, {0x2, 0x1000000}, {0x7, 0x4}, {0x40, 0x5d55}], 0xa, 0x5}, {[{}, {0xfff, 0x3}, {0xfffffff7, 0x2}, {0x5, 0x3}, {0x1}, {0x4, 0x1}, {0xae0, 0x3}, {0xffffffc0}, {0x8, 0x1}, {0x4}, {0x7, 0x3}], [{0x1, 0xfffffffc}, {0x1000, 0x7}, {0x2, 0xffffffff}, {0x80, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x8, 0x80}, {0xfffff802, 0x34a16896}], 0x6, 0x9}, {[{0x88, 0x3}, {0x9, 0x1}, {0xa610000, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x44, 0x2}, {0x9}, {0x3, 0x1}, {0x2}, {0x9, 0x1}, {0x9}], [{0x80000000, 0x6}, {0x7fffffff}, {0x382, 0x3ff}, {0x1, 0x8}, {0xbd, 0x2c8}, {0x7}, {0x10000, 0x5ff}, {0x7, 0x6}, {0x1fd, 0x2}, {0x7, 0xffffffff}, {0x4, 0xe6}], 0x0, 0x3}, {[{0x3, 0x1}, {0x1, 0x2}, {0x4}, {0x36, 0x3}, {0xe1}, {0x9, 0x6}, {0x1}, {0x101, 0x2}, {0x23, 0x3}, {0x6}, {0xffffffff, 0x2}], [{0x7, 0x8}, {0x84b, 0x4}, {0x9, 0x1}, {0x18d, 0x75091ebd}, {0x2, 0xf9}, {0x4, 0xfffffff5}, {0xa, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x1ff, 0x3ff}, {0x12505a58, 0x9}], 0x0, 0x4}], 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb78) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x54}}, 0x4000010) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r2, &(0x7f00000002c0)="62ea11adfaa52485351223e716f71060a313c8775571fbd001814ff31e021305284aa0bec8c20738e21e2bb334c0daee578f04bd3a9ad86a0a6c1174c4c9fca3c5d2f0533e24168dec92ac9c52e8d9256ef0a4771c5e32bed5294e", &(0x7f0000000380)=@buf="df18b8df6d6540c13c66ecff886965002d316d91ddd1d0fe532c3feaede5d79e8c981f479fb04e18a27303b98750e6b0ce2b7318fbd8f076bdba6770750198934642f239f3ed6bd1ae5786b57785aff5470b0e6798ce7220cbf13f978302e0e7f24e8c53c67cf8d97d6158a05f4a3f4093c9bc582df521c96d9b470f9a7ca3c881d8874968a521ce5389a4ff1de2dc7ef8f0d7f2c81ddef27c1b3dd5fc0174c41bd3879b62a63828ec593dc8dae36026b3a8767f737fd3acc97a32cb7de3e07ec00fba98efb39d7dbd4e923e5f2c95c76bda0e3d258b185b44697f50dfc3be70ecdd40a0d0c5d91ae75e879098e12da358f0dc20ee49ad30a3", 0x2}, 0x20) socket$packet(0x11, 0x2, 0x300) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='inode3']) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x28}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r5 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 289.435942ms ago: executing program 6 (id=1213): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 160.007084ms ago: executing program 2 (id=1216): r0 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000000b180), 0xa0140, 0x0) inotify_init1(0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48001) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 96.172215ms ago: executing program 2 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x44b, 0x600, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x48}}, 0x0) 60.868771ms ago: executing program 2 (id=1218): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="aa663c3226f8cb", 0x7, 0x4048881, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r0) 60.184191ms ago: executing program 2 (id=1219): prlimit64(0x0, 0xb, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) 36.877355ms ago: executing program 2 (id=1220): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 2 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xffffae1d) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x8094, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)={0x1, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR', 0x3}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): hwframe+0x77/0x7f [ 121.024779][ T6421] RIP: 0033:0x7f532181c819 [ 121.024802][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.024840][ T6421] RSP: 002b:00007f532026f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.024865][ T6421] RAX: ffffffffffffffda RBX: 00007f5321a95fa0 RCX: 00007f532181c819 [ 121.024880][ T6421] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000004 [ 121.024891][ T6421] RBP: 00007f532026f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.024903][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.025009][ T6421] R13: 00007f5321a96038 R14: 00007f5321a95fa0 R15: 00007ffeee0ca2c8 [ 121.025028][ T6421] [ 121.025064][ T6421] syz.4.510: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 121.314287][ T6421] CPU: 0 UID: 0 PID: 6421 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT(full) [ 121.314314][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.314324][ T6421] Call Trace: [ 121.314400][ T6421] [ 121.314409][ T6421] __dump_stack+0x1d/0x30 [ 121.314511][ T6421] dump_stack_lvl+0x95/0xd0 [ 121.314531][ T6421] dump_stack+0x15/0x1b [ 121.314550][ T6421] warn_alloc+0x145/0x1c0 [ 121.314579][ T6421] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 121.314611][ T6421] ? __rcu_read_unlock+0x4e/0x70 [ 121.314656][ T6421] ? avc_has_perm_noaudit+0xab/0x130 [ 121.314693][ T6421] ? sel_write_load+0x156/0x380 [ 121.314725][ T6421] vmalloc_noprof+0x82/0xb0 [ 121.314763][ T6421] ? sel_write_load+0x156/0x380 [ 121.314794][ T6421] sel_write_load+0x156/0x380 [ 121.314843][ T6421] ? __pfx_sel_write_load+0x10/0x10 [ 121.314874][ T6421] vfs_write+0x269/0x9f0 [ 121.314893][ T6421] ? __rcu_read_unlock+0x4e/0x70 [ 121.314913][ T6421] ? __fget_files+0x184/0x1c0 [ 121.315012][ T6421] ? mutex_lock+0x57/0x90 [ 121.315041][ T6421] ksys_write+0xdc/0x1a0 [ 121.315063][ T6421] __x64_sys_write+0x40/0x50 [ 121.315083][ T6421] x64_sys_call+0x27e1/0x3020 [ 121.315116][ T6421] do_syscall_64+0x12c/0x3b0 [ 121.315218][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.315241][ T6421] RIP: 0033:0x7f532181c819 [ 121.315328][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.315347][ T6421] RSP: 002b:00007f532026f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.315369][ T6421] RAX: ffffffffffffffda RBX: 00007f5321a95fa0 RCX: 00007f532181c819 [ 121.315459][ T6421] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000004 [ 121.315515][ T6421] RBP: 00007f532026f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.315600][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.315613][ T6421] R13: 00007f5321a96038 R14: 00007f5321a95fa0 R15: 00007ffeee0ca2c8 [ 121.315633][ T6421] [ 121.315651][ T6421] Mem-Info: [ 121.440198][ T6365] kexec: Could not allocate control_code_buffer [ 121.450950][ T6421] active_anon:29240 inactive_anon:316 isolated_anon:0 [ 121.450950][ T6421] active_file:18972 inactive_file:2551 isolated_file:0 [ 121.450950][ T6421] unevictable:0 dirty:52 writeback:0 [ 121.450950][ T6421] slab_reclaimable:3556 slab_unreclaimable:53596 [ 121.450950][ T6421] mapped:30548 shmem:19776 pagetables:3832 [ 121.450950][ T6421] sec_pagetables:0 bounce:0 [ 121.450950][ T6421] kernel_misc_reclaimable:0 [ 121.450950][ T6421] free:1681363 free_pcp:88252 free_cma:0 [ 121.609395][ T6421] Node 0 active_anon:116948kB inactive_anon:1264kB active_file:75888kB inactive_file:10208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122236kB dirty:220kB writeback:0kB shmem:79108kB kernel_stack:4176kB pagetables:15676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.658868][ T6421] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.689187][ T6421] lowmem_reserve[]: 0 2879 7857 7857 [ 121.740614][ T6421] Node 0 DMA32 free:2947032kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948096kB mlocked:0kB bounce:0kB free_pcp:1064kB local_pcp:1064kB free_cma:0kB [ 121.803897][ T6421] lowmem_reserve[]: 0 0 4978 4978 [ 121.809264][ T6421] Node 0 Normal free:3771268kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128208kB inactive_anon:1264kB active_file:76004kB inactive_file:10212kB unevictable:0kB writepending:260kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:331816kB local_pcp:73200kB free_cma:0kB [ 121.843857][ T6421] lowmem_reserve[]: 0 0 0 0 [ 121.889272][ T6421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.925750][ T6421] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 5*16kB (M) 3*32kB (M) 6*64kB (M) 5*128kB (M) 5*256kB (M) 3*512kB (M) 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2947032kB [ 121.953957][ T6463] loop5: detected capacity change from 0 to 512 [ 121.954179][ T6421] Node 0 Normal: 151*4kB (UME) 57*8kB (UME) 35*16kB (UM) 30*32kB (UME) 21*64kB (UME) 17*128kB (UM) 16*256kB (UE) 15*512kB (U) 17*1024kB (UE) 12*2048kB (U) 904*4096kB (UM) = 3762644kB [ 122.005634][ T6421] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 122.021294][ T6480] loop6: detected capacity change from 0 to 512 [ 122.034543][ T6480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.039887][ T6463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.066549][ T6421] 44672 total pagecache pages [ 122.074164][ T6421] 312 pages in swap cache [ 122.084956][ T6421] Free swap = 123020kB [ 122.086732][ T6463] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.103556][ T6421] Total swap = 124996kB [ 122.107827][ T6421] 2097051 pages RAM [ 122.111825][ T6421] 0 pages HighMem/MovableOnly [ 122.116814][ T6421] 81627 pages reserved [ 122.146554][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.203366][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.270353][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.364495][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.526754][ T6467] chnl_net:caif_netlink_parms(): no params data found [ 122.542929][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.556879][ T40] bridge_slave_1: left allmulticast mode [ 122.565666][ T40] bridge_slave_1: left promiscuous mode [ 122.588363][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.615058][ T40] bridge_slave_0: left allmulticast mode [ 122.629209][ T40] bridge_slave_0: left promiscuous mode [ 122.639505][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.660612][ T6534] netlink: 'syz.6.522': attribute type 1 has an invalid length. [ 122.759255][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.770019][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.780614][ T40] bond0 (unregistering): Released all slaves [ 122.816414][ T40] tipc: Left network mode [ 122.869478][ T6551] loop2: detected capacity change from 0 to 128 [ 122.883887][ T6551] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.911753][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.914898][ T6551] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.919278][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.938201][ T6467] bridge_slave_0: entered allmulticast mode [ 122.963347][ T6467] bridge_slave_0: entered promiscuous mode [ 122.985721][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.993125][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.001033][ T6467] bridge_slave_1: entered allmulticast mode [ 123.008979][ T6467] bridge_slave_1: entered promiscuous mode [ 123.015811][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.050235][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.065291][ T40] hsr_slave_0: left promiscuous mode [ 123.076759][ T40] hsr_slave_1: left promiscuous mode [ 123.091666][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.121701][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.155283][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.168865][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.179432][ T6580] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.185981][ T6580] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.210321][ T40] veth1_macvtap: left promiscuous mode [ 123.215952][ T40] veth0_macvtap: left promiscuous mode [ 123.224809][ T40] veth1_vlan: left promiscuous mode [ 123.265025][ T40] veth0_vlan: left promiscuous mode [ 123.334850][ T6593] loop4: detected capacity change from 0 to 4096 [ 123.423075][ T6598] loop6: detected capacity change from 0 to 128 [ 123.429933][ T6598] vfat: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 123.455889][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.464385][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.510600][ T6607] 9p: Bad value for 'rfdno' [ 123.559920][ T6607] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 124.855424][ T4084] smc: removing ib device !yz2 [ 124.862661][ T40] team0 (unregistering): Port device team_slave_1 removed [ 124.887543][ T40] team0 (unregistering): Port device team_slave_0 removed [ 125.047315][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.058371][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.172918][ T6725] loop4: detected capacity change from 0 to 1764 [ 125.508379][ T3749] !yz2: Port: 1 Link DOWN [ 125.722919][ T6467] team0: Port device team_slave_0 added [ 125.845924][ T6467] team0: Port device team_slave_1 added [ 125.949992][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.981481][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.095196][ T6755] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 126.101635][ T6755] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 126.151608][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.296892][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.373285][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.436435][ T6772] loop6: detected capacity change from 0 to 4096 [ 126.846579][ T6781] 9p: Bad value for 'rfdno' [ 126.908719][ T6781] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 127.419246][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.503097][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 127.503173][ T28] audit: type=1400 audit(1776191438.345:1459): avc: denied { setopt } for pid=6845 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.541259][ T6852] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 127.630475][ T28] audit: type=1400 audit(1776191438.375:1460): avc: denied { ioctl } for pid=6845 comm="syz.4.551" path="socket:[13213]" dev="sockfs" ino=13213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.752516][ T28] audit: type=1400 audit(1776191438.385:1461): avc: denied { setopt } for pid=6845 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.943674][ T28] audit: type=1400 audit(1776191438.785:1462): avc: denied { create } for pid=6861 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.000768][ T6467] hsr_slave_0: entered promiscuous mode [ 128.001177][ T6467] hsr_slave_1: entered promiscuous mode [ 128.001504][ T6467] debugfs: 'hsr0' already exists in 'hsr' [ 128.001516][ T6467] Cannot create hsr debugfs directory [ 128.059459][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 128.234414][ T6467] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 128.248851][ T28] audit: type=1400 audit(1776191439.075:1463): avc: denied { bind } for pid=6933 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.279677][ T6467] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 128.310242][ T6467] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 128.338414][ T6467] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 128.486761][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.520786][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.535417][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.542605][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.556555][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.563794][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.713236][ T6975] xt_hashlimit: size too large, truncated to 1048576 [ 128.719615][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.847437][ T6986] netlink: 'syz.6.561': attribute type 1 has an invalid length. [ 128.875894][ T6986] netlink: 'syz.6.561': attribute type 1 has an invalid length. [ 128.923301][ T6990] Q6`Ҙ: renamed from lo [ 129.025102][ T7001] loop6: detected capacity change from 0 to 128 [ 129.047507][ T7001] /dev/loop6: Can't open blockdev [ 129.087569][ T6467] veth0_vlan: entered promiscuous mode [ 129.126956][ T6467] veth1_vlan: entered promiscuous mode [ 129.155805][ T7010] loop5: detected capacity change from 0 to 1024 [ 129.193077][ T6467] veth0_macvtap: entered promiscuous mode [ 129.199307][ T7010] ext3: Unknown parameter 'smackfsfloor' [ 129.225050][ T6467] veth1_macvtap: entered promiscuous mode [ 129.256684][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.295911][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.295993][ T7023] loop6: detected capacity change from 0 to 4096 [ 129.343421][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.388391][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.426860][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.447338][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.457515][ T7033] 9p: Bad value for 'rfdno' [ 129.546866][ T7033] infiniband !yz2: set active [ 129.551860][ T7033] infiniband !yz2: added veth0_to_batadv [ 129.654869][ T7033] RDS/IB: !yz2: added [ 129.659038][ T7033] smc: adding ib device !yz2 with port count 1 [ 129.665442][ T7033] smc: ib device !yz2 port 1 has no pnetid [ 129.960216][ T7056] loop6: detected capacity change from 0 to 8 [ 129.977288][ C1] blk_print_req_error: 3 callbacks suppressed [ 129.977311][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.993615][ C1] buffer_io_error: 2 callbacks suppressed [ 129.993632][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.013901][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.024297][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.032671][ T7056] loop6: unable to read partition table [ 130.048964][ T7056] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 130.090684][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.101049][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.109121][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.119608][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.127527][ T7072] loop6: unable to read partition table [ 130.133574][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.143808][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.144230][ T7072] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 130.165586][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.176000][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.184957][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.195299][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.204699][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.214945][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.223184][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.233636][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.251534][ T7078] loop4: detected capacity change from 0 to 128 [ 130.267886][ T28] audit: type=1400 audit(1776191441.105:1464): avc: denied { ioctl } for pid=7080 comm="syz.5.576" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.270144][ T7081] loop5: detected capacity change from 0 to 512 [ 130.308556][ T7078] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.337478][ T7081] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.576: corrupted xattr block 95: invalid header [ 130.356638][ T7078] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.358839][ T7081] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.370910][ T7090] netlink: 292 bytes leftover after parsing attributes in process `syz.2.577'. [ 130.378707][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 130.384313][ T28] audit: type=1400 audit(1776191441.225:1465): avc: denied { append } for pid=7076 comm="syz.4.575" path="/122/file1/cpuset.effective_cpus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.389366][ C0] EXT4-fs (loop5): initial error at time 1776191441: ext4_expand_extra_isize_ea:2808 [ 130.396206][ T7081] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.576: bg 0: block 7: invalid block bitmap [ 130.420360][ C0] : inode 11 [ 130.420381][ C0] EXT4-fs (loop5): last error at time 1776191441: ext4_expand_extra_isize_ea:2808: inode 11 [ 130.432090][ T7090] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.577'. [ 130.466282][ T7081] loop5: lost filesystem error report for type 5 error -117 [ 130.482668][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.498229][ T7090] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 130.499371][ T28] audit: type=1400 audit(1776191441.335:1466): avc: denied { accept } for pid=7089 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 130.527529][ T7081] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 130.536889][ T7081] loop5: lost filesystem error report for type 5 error -117 [ 130.537205][ T7081] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2970: inode #11: comm syz.5.576: corrupted xattr block 95: invalid header [ 130.558811][ T7081] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.559293][ T7081] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 130.612812][ T7081] EXT4-fs (loop5): 1 orphan inode deleted [ 130.619194][ T7081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.729527][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.117904][ T7161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7161 comm=syz.2.583 [ 133.132028][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.581'. [ 133.166415][ T7162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7162 comm=syz.4.582 [ 133.208734][ T28] audit: type=1400 audit(1776191444.045:1467): avc: denied { write } for pid=7132 comm="syz.5.581" path="socket:[14416]" dev="sockfs" ino=14416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.552125][ T28] audit: type=1400 audit(1776191444.385:1468): avc: denied { read write } for pid=7187 comm="syz.4.589" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.848823][ T7194] netlink: 'syz.5.590': attribute type 10 has an invalid length. [ 133.873149][ T28] audit: type=1400 audit(1776191444.385:1469): avc: denied { open } for pid=7187 comm="syz.4.589" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.950203][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.5.590'. [ 134.055654][ T28] audit: type=1400 audit(1776191444.385:1470): avc: denied { ioctl } for pid=7187 comm="syz.4.589" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 134.210313][ T7198] loop7: detected capacity change from 0 to 1764 [ 134.351109][ T7200] loop6: detected capacity change from 0 to 1764 [ 134.463985][ T7194] vlan0: entered promiscuous mode [ 134.472988][ T7194] vlan0: entered allmulticast mode [ 134.481290][ T7194] veth0_vlan: entered allmulticast mode [ 134.505110][ T7194] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 134.828895][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'. [ 135.106913][ T7225] loop2: detected capacity change from 0 to 4096 [ 135.196683][ T28] audit: type=1400 audit(1776191446.035:1471): avc: denied { setopt } for pid=7245 comm="syz.5.597" lport=35071 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 135.202805][ T7248] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 135.240070][ T7248] audit: out of memory in audit_log_start [ 135.250696][ T7225] 9p: Bad value for 'rfdno' [ 135.268515][ T7225] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 135.317088][ T28] audit: type=1400 audit(1776191446.035:1472): avc: denied { write } for pid=7245 comm="syz.5.597" lport=35071 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 135.651211][ T7287] loop5: detected capacity change from 0 to 512 [ 135.681835][ T7287] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 135.744021][ T7287] EXT4-fs error (device loop5): ext4_iget_extra_inode:5042: inode #15: comm syz.5.599: corrupted in-inode xattr: e_value size too large [ 135.819755][ T7287] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.819988][ T7287] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.599: couldn't read orphan inode 15 (err -117) [ 135.829169][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 135.829189][ C1] EXT4-fs (loop5): initial error at time 1776191446: ext4_iget_extra_inode:5042: inode 15 [ 135.829225][ C1] EXT4-fs (loop5): last error at time 1776191446: ext4_iget_extra_inode:5042: inode 15 [ 135.899164][ T7287] loop5: lost filesystem error report for type 5 error -117 [ 135.899624][ T7287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.958546][ T28] audit: type=1400 audit(1776191446.805:1473): avc: denied { read } for pid=7286 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.089776][ T28] audit: type=1400 audit(1776191446.925:1474): avc: denied { read write } for pid=7286 comm="syz.5.599" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.634231][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.959953][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.601'. [ 137.142958][ T7390] netlink: 'syz.5.606': attribute type 1 has an invalid length. [ 137.192771][ T7390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.461837][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 138.471519][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 138.535347][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 138.541424][ T7427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.568670][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 138.623321][ T7427] loop2: detected capacity change from 0 to 512 [ 138.676803][ T7427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.744211][ T7427] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.777474][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 138.777490][ T28] audit: type=1400 audit(1776191449.615:1477): avc: denied { write } for pid=7441 comm="syz.4.616" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.824302][ T7427] tmpfs: Unknown parameter 'inode31' [ 138.828769][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.614'. [ 138.948110][ T7447] netlink: 'syz.5.617': attribute type 1 has an invalid length. [ 138.976703][ T7447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.052529][ T28] audit: type=1400 audit(1776191449.895:1478): avc: denied { read write } for pid=7426 comm="syz.2.612" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.081669][ T28] audit: type=1400 audit(1776191449.895:1479): avc: denied { open } for pid=7426 comm="syz.2.612" path="/138/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.118095][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.619'. [ 139.872883][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.366433][ T4082] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.770431][ T7514] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.934477][ T7521] loop4: detected capacity change from 0 to 1764 [ 140.983885][ T7526] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 141.036574][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.067286][ T7526] loop5: detected capacity change from 0 to 512 [ 141.110543][ T7526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.136443][ T7526] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.156222][ T7548] loop6: detected capacity change from 0 to 512 [ 141.162981][ T7526] tmpfs: Unknown parameter 'inode31' [ 141.193688][ T7548] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.253514][ T7548] EXT4-fs (loop6): 1 truncate cleaned up [ 141.303358][ T7548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.438441][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.980404][ T28] audit: type=1400 audit(1776191452.585:1480): avc: denied { remount } for pid=7567 comm="syz.7.640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.238118][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.304338][ T28] audit: type=1400 audit(1776191453.125:1481): avc: denied { bind } for pid=7578 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.418902][ T3682] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.441328][ T28] audit: type=1400 audit(1776191453.285:1482): avc: denied { ioctl } for pid=7585 comm="syz.7.645" path="socket:[14077]" dev="sockfs" ino=14077 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.470340][ T7588] loop6: detected capacity change from 0 to 512 [ 142.547834][ T7588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.572438][ T7588] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.729301][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.883837][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.648'. [ 143.263069][ T7609] loop5: detected capacity change from 0 to 512 [ 143.280926][ T7609] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.303549][ T7611] netlink: 'syz.7.651': attribute type 1 has an invalid length. [ 143.312774][ T7609] EXT4-fs (loop5): 1 truncate cleaned up [ 143.319007][ T7609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.331612][ T7611] netlink: 'syz.7.651': attribute type 1 has an invalid length. [ 143.392081][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.401784][ T7614] vti0: entered promiscuous mode [ 143.533006][ T28] audit: type=1326 audit(1776191454.376:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7623 comm="syz.7.656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ea83fc819 code=0x0 [ 143.614192][ T28] audit: type=1400 audit(1776191454.456:1484): avc: denied { create } for pid=7623 comm="syz.7.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 143.717487][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.656'. [ 143.760679][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.660'. [ 143.823598][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.6.660'. [ 143.839792][ T7637] netlink: 484 bytes leftover after parsing attributes in process `syz.6.660'. [ 143.854177][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.6.660'. [ 144.143069][ T28] audit: type=1400 audit(1776191454.906:1485): avc: denied { append } for pid=7630 comm="syz.5.659" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.412114][ T7645] netlink: 'syz.7.662': attribute type 8 has an invalid length. [ 144.425147][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.662'. [ 144.560392][ T28] audit: type=1400 audit(1776191455.406:1486): avc: denied { mount } for pid=7650 comm="syz.5.664" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 144.599215][ T7652] loop2: detected capacity change from 0 to 512 [ 144.606369][ T7652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.632715][ T7652] EXT4-fs (loop2): 1 truncate cleaned up [ 144.639480][ T7653] loop7: detected capacity change from 0 to 128 [ 144.646411][ T7652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.689956][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.733344][ T7653] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.814711][ T7653] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.016613][ T28] audit: type=1400 audit(1776191455.856:1487): avc: denied { append } for pid=7676 comm="syz.6.673" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.098565][ T6467] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.109293][ T28] audit: type=1326 audit(1776191455.926:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532181c819 code=0x7ffc0000 [ 145.179343][ T28] audit: type=1326 audit(1776191455.926:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532181c819 code=0x7ffc0000 [ 145.228417][ T7696] loop7: detected capacity change from 0 to 512 [ 145.236644][ T28] audit: type=1326 audit(1776191455.926:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532181c819 code=0x7ffc0000 [ 145.261217][ T7696] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 145.293430][ T28] audit: type=1326 audit(1776191455.926:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f532181c819 code=0x7ffc0000 [ 145.294473][ T7696] EXT4-fs (loop7): 1 truncate cleaned up [ 145.342310][ T28] audit: type=1326 audit(1776191455.926:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532181c819 code=0x7ffc0000 [ 145.365688][ T28] audit: type=1326 audit(1776191455.926:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532181c819 code=0x7ffc0000 [ 145.389025][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.396645][ T28] audit: type=1326 audit(1776191455.926:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532181c819 code=0x7ffc0000 [ 145.427721][ T7702] syzkaller1: entered promiscuous mode [ 145.433272][ T7702] syzkaller1: entered allmulticast mode [ 145.445197][ T7696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.558087][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.858220][ T7725] loop6: detected capacity change from 0 to 512 [ 145.884845][ T7725] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 145.920185][ T7725] EXT4-fs (loop6): 1 truncate cleaned up [ 145.936415][ T7725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.000970][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.120417][ T7734] loop5: detected capacity change from 0 to 1764 [ 146.939660][ T7741] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 146.948252][ T7741] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 147.329020][ T7739] loop7: detected capacity change from 0 to 512 [ 147.949157][ T7739] EXT4-fs (loop7): 1 truncate cleaned up [ 147.961801][ T7739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.997488][ T7739] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.695: bg 0: block 465: padding at end of block bitmap is not set [ 148.015398][ T7739] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 148.029005][ T7739] EXT4-fs (loop7): This should not happen!! Data will be lost [ 148.029005][ T7739] [ 148.039289][ T7739] EXT4-fs (loop7): Total free blocks count 0 [ 148.045777][ T7739] EXT4-fs (loop7): Free/Dirty block details [ 148.052586][ T7739] EXT4-fs (loop7): free_blocks=0 [ 148.058009][ T7739] EXT4-fs (loop7): dirty_blocks=66 [ 148.063549][ T7739] EXT4-fs (loop7): Block reservation details [ 148.069931][ T7739] EXT4-fs (loop7): i_reserved_data_blocks=66 [ 148.110586][ T7739] Cannot find add_set index 0 as target [ 148.357511][ T7739] syz.7.695 (7739) used greatest stack depth: 8184 bytes left [ 148.684824][ T3636] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 148.704713][ T7775] loop5: detected capacity change from 0 to 8192 [ 148.739204][ T6467] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 148.865040][ T7775] loop5: p2 p3 p4 < > [ 148.869226][ T7775] loop5: partition table partially beyond EOD, truncated [ 148.876296][ T7775] loop5: p2 size 590592 extends beyond EOD, truncated [ 149.874957][ T28] kauditd_printk_skb: 1655 callbacks suppressed [ 149.874971][ T28] audit: type=1400 audit(1776191460.716:3150): avc: denied { connect } for pid=7774 comm="syz.5.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.908013][ T7775] loop5: p3 start 4294967295 is beyond EOD, truncated [ 149.922079][ T7775] loop5: p4 start 117440516 is beyond EOD, truncated [ 150.108417][ T28] audit: type=1326 audit(1776191460.736:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11163fdb99 code=0x7ffc0000 [ 150.191501][ T28] audit: type=1326 audit(1776191460.736:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1116456597 code=0x7ffc0000 [ 150.275897][ T28] audit: type=1326 audit(1776191460.736:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11163fdb99 code=0x7ffc0000 [ 150.327920][ T28] audit: type=1326 audit(1776191460.736:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1116456597 code=0x7ffc0000 [ 150.394838][ T28] audit: type=1326 audit(1776191460.736:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11163fdb99 code=0x7ffc0000 [ 150.606416][ T7795] loop5: detected capacity change from 0 to 4096 [ 150.934345][ T28] audit: type=1326 audit(1776191460.736:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1116456597 code=0x7ffc0000 [ 151.250555][ T7800] 9p: Bad value for 'rfdno' [ 151.528496][ T7805] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 151.528944][ T28] audit: type=1326 audit(1776191460.736:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11163fdb99 code=0x7ffc0000 [ 151.559539][ T28] audit: type=1326 audit(1776191460.736:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1116456597 code=0x7ffc0000 [ 151.588440][ T7808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.595905][ T7808] IPv6: NLM_F_CREATE should be set when creating new route [ 151.603136][ T7808] IPv6: NLM_F_CREATE should be set when creating new route [ 151.654497][ T28] audit: type=1326 audit(1776191460.736:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.6.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11163fdb99 code=0x7ffc0000 [ 151.748907][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 151.771402][ T7822] netlink: 432 bytes leftover after parsing attributes in process `syz.4.719'. [ 151.790312][ T7828] netlink: 'syz.7.721': attribute type 1 has an invalid length. [ 151.813990][ T7825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.820516][ T7825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.846770][ T7828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.897756][ T7828] netlink: 'syz.7.721': attribute type 1 has an invalid length. [ 151.922695][ T7828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.998176][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 152.008544][ T7857] loop6: detected capacity change from 0 to 1024 [ 152.021484][ T7857] EXT4-fs: inline encryption not supported [ 152.026146][ T7842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41744 sclass=netlink_route_socket pid=7842 comm=syz.4.723 [ 152.082872][ T7857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.141213][ T7857] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.216947][ T7857] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.726: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.277725][ T3631] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.314551][ T3631] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 152.337063][ T3631] EXT4-fs (loop6): This should not happen!! Data will be lost [ 152.337063][ T3631] [ 152.353331][ T6143] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 152.365116][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.890828][ T7902] loop6: detected capacity change from 0 to 512 [ 152.908678][ T7902] msdos: Bad value for 'time_offset' [ 153.038067][ T7912] netlink: 'syz.7.735': attribute type 1 has an invalid length. [ 153.108332][ T7912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.132438][ T7922] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 153.229364][ T7933] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.263450][ T7933] loop6: detected capacity change from 0 to 512 [ 153.292605][ T7933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.334542][ T7933] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.440811][ T7964] tmpfs: Unknown parameter 'inode31' [ 153.769556][ T7976] loop5: detected capacity change from 0 to 1764 [ 153.937417][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.137755][ T7988] loop4: detected capacity change from 0 to 128 [ 154.196737][ T7988] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 154.218329][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.227551][ T7988] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.272191][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.362772][ T7996] bond_slave_0: entered promiscuous mode [ 154.368515][ T7996] bond_slave_1: entered promiscuous mode [ 154.400146][ T7996] macvlan2: entered allmulticast mode [ 154.421125][ T7996] bond0: entered allmulticast mode [ 154.448017][ T7996] bond_slave_0: entered allmulticast mode [ 154.460069][ T7996] bond_slave_1: entered allmulticast mode [ 154.481383][ T7996] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.519920][ T7996] bond0: left allmulticast mode [ 154.543039][ T7996] bond_slave_0: left allmulticast mode [ 154.560963][ T7996] bond_slave_1: left allmulticast mode [ 154.574859][ T7996] bond_slave_0: left promiscuous mode [ 154.580304][ T7996] bond_slave_1: left promiscuous mode [ 154.586494][ T8003] netlink: 'syz.4.753': attribute type 36 has an invalid length. [ 154.617115][ T8003] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 154.647249][ T8003] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.654442][ T8001] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 154.673050][ T8001] loop4: detected capacity change from 0 to 256 [ 154.893707][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 154.893724][ T28] audit: type=1400 audit(1776191465.736:3247): avc: denied { map } for pid=8008 comm="syz.7.755" path="socket:[16422]" dev="sockfs" ino=16422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 154.949694][ T8009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.957102][ T8009] IPv6: NLM_F_CREATE should be set when creating new route [ 154.965450][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.755'. [ 154.979798][ T8009] netlink: 432 bytes leftover after parsing attributes in process `syz.7.755'. [ 155.196099][ T8022] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 155.616079][ T28] audit: type=1400 audit(1776191466.456:3248): avc: denied { read } for pid=8026 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.004814][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 157.014688][ T8066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8066 comm=syz.2.773 [ 157.028570][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 157.037417][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 157.046340][ T28] audit: type=1400 audit(1776191467.846:3249): avc: denied { getopt } for pid=8065 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.156430][ T8071] loop2: detected capacity change from 0 to 512 [ 157.167204][ T8071] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.176278][ T8071] EXT4-fs (loop2): filesystem is read-only [ 157.236531][ T8071] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 157.237500][ T28] audit: type=1400 audit(1776191468.076:3250): avc: denied { mac_admin } for pid=8070 comm="syz.2.774" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.268461][ T28] audit: type=1400 audit(1776191468.086:3251): avc: denied { relabelto } for pid=8070 comm="syz.2.774" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 157.313208][ T8076] loop5: detected capacity change from 0 to 512 [ 157.355983][ T28] audit: type=1400 audit(1776191468.086:3252): avc: denied { associate } for pid=8070 comm="syz.2.774" name="loop9" dev="devtmpfs" ino=109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hostname_exec_t:s0" [ 157.404519][ T8078] macsec0: entered allmulticast mode [ 157.410437][ T8078] veth1_macvtap: entered allmulticast mode [ 157.416462][ T8078] macsec0: left allmulticast mode [ 157.422165][ T8078] veth1_macvtap: left allmulticast mode [ 157.498682][ T28] audit: type=1400 audit(1776191468.346:3253): avc: denied { ioctl } for pid=8083 comm="syz.4.779" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 157.975663][ T8113] loop5: detected capacity change from 0 to 128 [ 157.982647][ T8113] vfat: Unknown parameter '' [ 158.021953][ T8113] loop5: detected capacity change from 0 to 1024 [ 158.338519][ T8113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.391923][ T8118] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.437260][ T8118] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.478845][ T8118] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.495053][ T8118] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.607437][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.633737][ T8118] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.655289][ T8118] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.734338][ T8118] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.767310][ T8118] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.795634][ T8151] loop6: detected capacity change from 0 to 1764 [ 158.925402][ T3631] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.934050][ T3631] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.962373][ T3631] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.970715][ T3631] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.992868][ T8159] loop4: detected capacity change from 0 to 512 [ 159.003043][ T3631] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.022048][ T3631] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.043103][ T8162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8162 comm=syz.5.792 [ 159.057414][ T8159] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.143663][ T4082] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.166673][ T4082] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.287472][ T8165] netlink: 'syz.5.793': attribute type 1 has an invalid length. [ 159.347937][ T8165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.375726][ T8168] loop2: detected capacity change from 0 to 1024 [ 159.384319][ T8168] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.406243][ T8168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.427129][ T8168] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.446935][ T8168] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.794: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 159.473047][ T28] audit: type=1400 audit(1776191470.316:3254): avc: denied { mount } for pid=8177 comm="syz.5.797" name="/" dev="ramfs" ino=16008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 159.493062][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.500160][ T8178] random: crng reseeded on system resumption [ 159.504592][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.509907][ T8168] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.531181][ T28] audit: type=1400 audit(1776191470.336:3255): avc: denied { write } for pid=8177 comm="syz.5.797" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.552166][ T8178] loop5: detected capacity change from 0 to 512 [ 159.563540][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 159.563563][ C1] EXT4-fs (loop2): initial error at time 1776191470: ext4_ext_check_inode:521: inode 11 [ 159.563594][ C1] EXT4-fs (loop2): last error at time 1776191470: ext4_ext_check_inode:521: inode 11 [ 159.566429][ T28] audit: type=1400 audit(1776191470.336:3256): avc: denied { open } for pid=8177 comm="syz.5.797" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.619908][ T8168] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.794: couldn't read orphan inode 11 (err -117) [ 159.642260][ T8168] loop2: lost filesystem error report for type 5 error -117 [ 159.642934][ T8168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.650255][ T8178] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 159.688342][ T8178] EXT4-fs (loop5): 1 truncate cleaned up [ 159.695732][ T8178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.711530][ T8178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.764815][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.181377][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 160.181396][ T28] audit: type=1400 audit(1776191470.956:3261): avc: denied { write } for pid=8193 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 160.223211][ T3321] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 160.292298][ T8203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=8203 comm=syz.4.805 [ 160.350450][ T8203] loop4: detected capacity change from 0 to 512 [ 160.382216][ T8203] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 160.415886][ T8200] loop2: detected capacity change from 0 to 8192 [ 160.439306][ T8203] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 160.478639][ T8200] loop2: p2 p3 p4 < > [ 160.482800][ T8200] loop2: partition table partially beyond EOD, truncated [ 160.490163][ T8200] loop2: p2 size 590592 extends beyond EOD, truncated [ 160.493112][ T8203] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.805: Corrupt directory, running e2fsck is recommended [ 160.510368][ T8200] loop2: p3 start 4294967295 is beyond EOD, truncated [ 160.517411][ T8200] loop2: p4 start 117440516 is beyond EOD, truncated [ 160.520720][ T28] audit: type=1400 audit(1776191471.366:3262): avc: denied { read } for pid=8210 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.549951][ T8203] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 160.567033][ T8203] EXT4-fs error (device loop4): ext4_iget_extra_inode:5042: inode #15: comm syz.4.805: corrupted in-inode xattr: e_name out of bounds [ 160.605614][ T8214] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 160.668764][ T8203] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.669423][ T8203] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.805: couldn't read orphan inode 15 (err -117) [ 160.678682][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 160.678709][ C1] EXT4-fs (loop4): initial error at time 1776191471: ext4_iget_extra_inode:5042: inode 15 [ 160.678734][ C1] EXT4-fs (loop4): last error at time 1776191471: ext4_iget_extra_inode:5042: inode 15 [ 160.915146][ T8203] loop4: lost filesystem error report for type 5 error -117 [ 160.917712][ T8203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.089181][ T28] audit: type=1400 audit(1776191471.927:3263): avc: denied { ioctl } for pid=8210 comm="syz.5.808" path="socket:[16767]" dev="sockfs" ino=16767 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.161420][ T8203] IPVS: Scheduler module ip_vs_ not found [ 161.200443][ T28] audit: type=1400 audit(1776191471.937:3264): avc: denied { getopt } for pid=8210 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.211649][ T8220] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.230945][ T8220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.276285][ T8220] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.283465][ T28] audit: type=1400 audit(1776191471.987:3265): avc: denied { tracepoint } for pid=8202 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.287151][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.334939][ T8220] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.809: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 161.446555][ T8220] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.446695][ T8220] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.809: couldn't read orphan inode 11 (err -117) [ 161.456044][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 161.456080][ C0] EXT4-fs (loop2): initial error at time 1776191472: ext4_ext_check_inode:521: inode 11 [ 161.456115][ C0] EXT4-fs (loop2): last error at time 1776191472: ext4_ext_check_inode:521: inode 11 [ 161.498162][ T8220] loop2: lost filesystem error report for type 5 error -117 [ 161.498771][ T8220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.533277][ T8234] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 161.692708][ T8234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.748339][ T28] audit: type=1400 audit(1776191472.547:3266): avc: denied { setopt } for pid=8243 comm="syz.7.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.781677][ T8244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.142160][ T8260] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 162.222190][ T8260] EXT4-fs (loop7): 1 truncate cleaned up [ 162.282746][ T8260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.756169][ T8275] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 162.775571][ T8275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.849170][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.958826][ T28] audit: type=1400 audit(1776191473.807:3267): avc: denied { name_bind } for pid=8283 comm="syz.2.831" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 163.020790][ T8286] set_capacity_and_notify: 4 callbacks suppressed [ 163.020808][ T8286] loop5: detected capacity change from 0 to 1024 [ 163.040216][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.832'. [ 163.051399][ T8286] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.082777][ T8286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.111520][ T8286] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.147712][ T8286] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.830: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 163.209211][ T8286] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 163.209328][ T8286] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.830: couldn't read orphan inode 11 (err -117) [ 163.218580][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 163.218595][ C1] EXT4-fs (loop5): initial error at time 1776191474: ext4_ext_check_inode:521: inode 11 [ 163.218619][ C1] EXT4-fs (loop5): last error at time 1776191474: ext4_ext_check_inode:521: inode 11 [ 163.355290][ T8286] loop5: lost filesystem error report for type 5 error -117 [ 163.355902][ T8286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.393693][ T8298] loop6: detected capacity change from 0 to 512 [ 163.414927][ T8298] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 163.464664][ T8298] EXT4-fs (loop6): 1 truncate cleaned up [ 163.471270][ T8298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.510206][ T8286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.521135][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.701412][ T8310] loop6: detected capacity change from 0 to 4096 [ 163.723079][ T8310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.847675][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.917184][ T28] audit: type=1400 audit(1776191474.757:3268): avc: denied { execute } for pid=8320 comm="syz.2.844" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 164.111070][ T8328] loop6: detected capacity change from 0 to 1764 [ 164.148443][ T8336] loop7: detected capacity change from 0 to 512 [ 164.167990][ T8336] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 164.196243][ T8336] EXT4-fs (loop7): 1 truncate cleaned up [ 164.202655][ T8336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.228474][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.290079][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.853'. [ 164.514464][ T8354] ------------[ cut here ]------------ [ 164.520110][ T8354] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 164.545004][ T8354] WARNING: kernel/bpf/verifier.c:2830 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.4.858/8354 [ 164.555929][ T8354] Modules linked in: [ 164.559927][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.4.858 Not tainted syzkaller #0 PREEMPT(full) [ 164.569197][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.579593][ T8354] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 164.585977][ T8354] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 164.605913][ T8354] RSP: 0018:ffffc900021bb370 EFLAGS: 00010246 [ 164.612159][ T8354] RAX: ffff888119709b88 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 164.620190][ T8354] RDX: ffffffff86a1c211 RSI: ffffffff868dd861 RDI: ffffffff873d1ea0 [ 164.628257][ T8354] RBP: ffff88811b676270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 164.636386][ T8354] R10: 00000000000000d0 R11: 0000000000000000 R12: ffff88811b676230 [ 164.644457][ T8354] R13: 00000000ffffdfcc R14: ffff88811b67627c R15: ffff88811b676268 [ 164.652785][ T8354] FS: 00007f532026f6c0(0000) GS:ffff8882ae6d4000(0000) knlGS:0000000000000000 [ 164.661778][ T8354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.668614][ T8354] CR2: 00007f53218cedd5 CR3: 000000016366a000 CR4: 00000000003506f0 [ 164.676653][ T8354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.684669][ T8354] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 164.692676][ T8354] Call Trace: [ 164.696007][ T8354] [ 164.699119][ T8354] reg_set_min_max+0x1c8/0x260 [ 164.704107][ T8354] check_cond_jmp_op+0x13b2/0x1a80 [ 164.709390][ T8354] do_check+0x4a9b/0x9840 [ 164.713954][ T8354] do_check_common+0xd0b/0x1630 [ 164.718889][ T8354] bpf_check+0x2f78/0xcc30 [ 164.723459][ T8354] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 164.729846][ T8354] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 164.735530][ T8354] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 164.741569][ T8354] ? css_rstat_updated+0xbb/0x280 [ 164.746610][ T8354] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 164.752794][ T8354] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 164.758978][ T8354] ? css_rstat_updated+0xbb/0x280 [ 164.764004][ T8354] ? mod_memcg_state+0x182/0x270 [ 164.769052][ T8354] ? __rcu_read_unlock+0x4e/0x70 [ 164.774011][ T8354] ? avc_has_perm_noaudit+0xab/0x130 [ 164.779576][ T8354] ? avc_has_perm+0x101/0x190 [ 164.784325][ T8354] ? selinux_bpf_prog_load+0x197/0x1c0 [ 164.789931][ T8354] ? security_bpf_prog_load+0x9e/0x140 [ 164.795522][ T8354] bpf_prog_load+0xf76/0x1140 [ 164.800633][ T8354] ? security_bpf+0x2b/0x90 [ 164.805171][ T8354] __sys_bpf+0x505/0x7e0 [ 164.809459][ T8354] __x64_sys_bpf+0x41/0x50 [ 164.813899][ T8354] x64_sys_call+0x10cb/0x3020 [ 164.818699][ T8354] do_syscall_64+0x12c/0x3b0 [ 164.823314][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.829282][ T8354] RIP: 0033:0x7f532181c819 [ 164.833708][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.853542][ T8354] RSP: 002b:00007f532026f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.862175][ T8354] RAX: ffffffffffffffda RBX: 00007f5321a95fa0 RCX: 00007f532181c819 [ 164.870291][ T8354] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 164.878299][ T8354] RBP: 00007f53218b2c91 R08: 0000000000000000 R09: 0000000000000000 [ 164.886268][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.894408][ T8354] R13: 00007f5321a96038 R14: 00007f5321a95fa0 R15: 00007ffeee0ca2c8 [ 164.902438][ T8354] [ 164.905502][ T8354] ---[ end trace 0000000000000000 ]--- [ 165.012068][ T8369] loop7: detected capacity change from 0 to 512 [ 165.019350][ T8367] process 'syz.2.863' launched './file0' with NULL argv: empty string added [ 165.026900][ T8369] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 165.028543][ T28] audit: type=1400 audit(1776191475.867:3269): avc: denied { execute } for pid=8365 comm="syz.2.863" name="file0" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.078988][ T8369] EXT4-fs (loop7): 1 truncate cleaned up [ 165.085059][ T8369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.118947][ T28] audit: type=1400 audit(1776191475.957:3270): avc: denied { execute_no_trans } for pid=8365 comm="syz.2.863" path="/179/file0" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.143986][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.277727][ T8383] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 165.753783][ T8404] loop6: detected capacity change from 0 to 128 [ 165.760435][ T8404] vfat: Unknown parameter '' [ 165.822190][ T8404] loop6: detected capacity change from 0 to 1024 [ 165.886586][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.867'. [ 165.909000][ T8404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.975124][ T8414] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.875'. [ 166.008646][ T8415] loop7: detected capacity change from 0 to 256 [ 166.049511][ T8415] msdos: Unknown parameter '' [ 166.198061][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.249052][ T8422] loop6: detected capacity change from 0 to 512 [ 166.273065][ T8417] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 166.294494][ T8422] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 166.341901][ T8422] EXT4-fs (loop6): 1 truncate cleaned up [ 166.358632][ T8422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.424725][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.861466][ T8446] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 166.884432][ T8449] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.904127][ T8446] EXT4-fs (loop7): 1 truncate cleaned up [ 166.949873][ T8446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.991295][ T8449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.000601][ T8456] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 167.026780][ T8449] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.041038][ T8449] tmpfs: Unknown parameter 'inode31' [ 167.046854][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.174737][ T8462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.220944][ T8462] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.892: iget: bad i_size value: 38620345925642 [ 167.281215][ T8462] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.281558][ T8462] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.892: couldn't read orphan inode 15 (err -117) [ 167.290878][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 167.290899][ C0] EXT4-fs (loop7): initial error at time 1776191478: ext4_orphan_get:1397: inode 15 [ 167.290927][ C0] EXT4-fs (loop7): last error at time 1776191478: ext4_orphan_get:1397: inode 15 [ 167.390881][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.396658][ T8462] loop7: lost filesystem error report for type 5 error -117 [ 167.417286][ T8462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.482299][ T6143] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 167.501178][ T8456] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.531952][ T8456] tmpfs: Unknown parameter 'inode31' [ 167.547032][ T28] audit: type=1400 audit(1776191478.387:3271): avc: denied { map } for pid=8461 comm="syz.7.892" path="/69/bus/cpuset.effective_mems" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.577744][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 167.577800][ T6143] Tainted: [W]=WARN [ 167.577807][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.577819][ T6143] Call Trace: [ 167.577825][ T6143] [ 167.577833][ T6143] __dump_stack+0x1d/0x30 [ 167.577893][ T6143] dump_stack_lvl+0x95/0xd0 [ 167.577913][ T6143] dump_stack+0x15/0x1b [ 167.577931][ T6143] dump_header+0x80/0x240 [ 167.577952][ T6143] oom_kill_process+0x295/0x350 [ 167.577976][ T6143] out_of_memory+0x97d/0xb80 [ 167.578070][ T6143] try_charge_memcg+0x62e/0xa10 [ 167.578109][ T6143] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 167.578153][ T6143] __swap_cache_prepare_and_add+0x67/0x460 [ 167.578186][ T6143] ? alloc_pages_mpol+0x217/0x260 [ 167.578251][ T6143] swap_cache_alloc_folio+0xa2/0x120 [ 167.578282][ T6143] swap_cluster_readahead+0x36b/0x3d0 [ 167.578339][ T6143] swapin_readahead+0xde/0x840 [ 167.578366][ T6143] ? __rcu_read_unlock+0x4e/0x70 [ 167.578386][ T6143] ? __perf_event_task_sched_in+0xa65/0xad0 [ 167.578508][ T6143] ? __list_add_valid_or_report+0x38/0xe0 [ 167.578541][ T6143] ? xfd_validate_state+0x45/0xf0 [ 167.578565][ T6143] ? __rcu_read_unlock+0x4e/0x70 [ 167.578586][ T6143] ? swap_cache_get_folio+0x26f/0x280 [ 167.578623][ T6143] do_swap_page+0x2fe/0x21e0 [ 167.578653][ T6143] ? __schedule+0x93c/0xd40 [ 167.578680][ T6143] ? __rcu_read_lock+0x36/0x50 [ 167.578782][ T6143] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 167.578811][ T6143] handle_mm_fault+0xb46/0x3020 [ 167.578922][ T6143] ? vma_start_read+0x1c7/0x2c0 [ 167.578949][ T6143] do_user_addr_fault+0x62f/0x1050 [ 167.578987][ T6143] ? trace_page_fault_user+0x1f/0xe0 [ 167.579017][ T6143] exc_page_fault+0x62/0xa0 [ 167.579047][ T6143] asm_exc_page_fault+0x26/0x30 [ 167.579197][ T6143] RIP: 0033:0x7f1116417997 [ 167.579213][ T6143] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 167.579229][ T6143] RSP: 002b:00007ffee48c6330 EFLAGS: 00010202 [ 167.579244][ T6143] RAX: 0000000000000000 RBX: 000055558b3e4500 RCX: 00007f1116417997 [ 167.579259][ T6143] RDX: 00007ffee48c6370 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.579272][ T6143] RBP: 00007ffee48c63dc R08: 0000000000000000 R09: 0000000000000000 [ 167.579305][ T6143] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 167.579319][ T6143] R13: 00000000000927c0 R14: 0000000000028e0d R15: 00007ffee48c6430 [ 167.579339][ T6143] [ 167.579376][ T6143] memory: usage 304308kB, limit 307200kB, failcnt 372 [ 167.749211][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.869693][ T6143] memory+swap: usage 307864kB, limit 9007199254740988kB, failcnt 0 [ 167.889427][ T6143] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 167.926868][ T6143] Memory cgroup stats for /syz6: [ 167.927121][ T6143] cache 8192 [ 167.948290][ T6143] rss 4096 [ 167.955570][ T6143] shmem 0 [ 167.969988][ T6143] mapped_file 0 [ 167.980250][ T6143] dirty 0 [ 167.991241][ T6143] writeback 8192 [ 168.002865][ T6143] workingset_refault_anon 203 [ 168.017091][ T6143] workingset_refault_file 4 [ 168.048874][ T6143] swap 667648 [ 168.055352][ T6143] swapcached 1826816 [ 168.077239][ T6143] pgpgin 38033 [ 168.089131][ T6143] pgpgout 38027 [ 168.104703][ T6143] pgfault 45190 [ 168.124135][ T6143] pgmajfault 105 [ 168.132006][ T6143] inactive_anon 0 [ 168.137944][ T6143] active_anon 8192 [ 168.144708][ T6143] inactive_file 0 [ 168.177969][ T6143] active_file 8192 [ 168.184514][ T6143] unevictable 0 [ 168.200696][ T6143] hierarchical_memory_limit 314572800 [ 168.206152][ T6143] hierarchical_memsw_limit 9223372036854771712 [ 168.251089][ T8359] syz.4.858 (8359) used greatest stack depth: 7056 bytes left [ 168.264714][ T6143] total_cache 8192 [ 168.277853][ T6143] total_rss 4096 [ 168.305936][ T6143] total_shmem 0 [ 168.323462][ T6143] total_mapped_file 0 [ 168.362087][ T6143] total_dirty 0 [ 168.365576][ T6143] total_writeback 8192 [ 168.396712][ T6143] total_workingset_refault_anon 203 [ 168.408071][ T6143] total_workingset_refault_file 4 [ 168.420710][ T6143] total_swap 667648 [ 168.424701][ T6143] total_swapcached 1826816 [ 168.429434][ T6143] total_pgpgin 38033 [ 168.433331][ T6143] total_pgpgout 38027 [ 168.458087][ T6143] total_pgfault 45190 [ 168.463581][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.904'. [ 168.473082][ T6143] total_pgmajfault 105 [ 168.478554][ T6143] total_inactive_anon 0 [ 168.482763][ T6143] total_active_anon 8192 [ 168.487242][ T6143] total_inactive_file 0 [ 168.491391][ T6143] total_active_file 8192 [ 168.495626][ T6143] total_unevictable 0 [ 168.500250][ T6143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.890,pid=8447,uid=0 [ 168.515219][ T6143] Memory cgroup out of memory: Killed process 8447 (syz.6.890) total-vm:159700kB, anon-rss:1224kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 168.547144][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.600414][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.833219][ T8544] 9p: Bad value for 'rfdno' [ 168.857193][ T8544] SELinux: Context system_u:object_r:dmidecode_exec_t:s0 is not valid (left unmapped). [ 168.894576][ T28] audit: type=1400 audit(1776191479.737:3272): avc: denied { relabelto } for pid=8541 comm="syz.2.917" name="file0" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0" [ 168.932152][ T28] audit: type=1400 audit(1776191479.767:3273): avc: denied { associate } for pid=8541 comm="syz.2.917" name="file0" dev="tmpfs" ino=1030 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dmidecode_exec_t:s0" [ 168.966306][ T8536] set_capacity_and_notify: 6 callbacks suppressed [ 168.966324][ T8536] loop7: detected capacity change from 0 to 1024 [ 169.006934][ T8536] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.043458][ T8536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.064027][ T8536] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.081284][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 169.270905][ T8536] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.914: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 169.455104][ T8536] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 169.455942][ T8536] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.914: couldn't read orphan inode 11 (err -117) [ 169.465263][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 169.465280][ C0] EXT4-fs (loop7): initial error at time 1776191480: ext4_ext_check_inode:521: inode 11 [ 169.465308][ C0] EXT4-fs (loop7): last error at time 1776191480: ext4_ext_check_inode:521: inode 11 [ 169.778729][ T8536] loop7: lost filesystem error report for type 5 error -117 [ 169.779158][ T8536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.931924][ T8535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.400050][ T8576] loop7: detected capacity change from 0 to 128 [ 170.467430][ T8576] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.503398][ T8576] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.610815][ T28] audit: type=1400 audit(1776191481.447:3274): avc: denied { watch watch_reads } for pid=8575 comm="syz.7.926" path="/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.699745][ T6467] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.709866][ T28] audit: type=1400 audit(1776191481.507:3275): avc: denied { getopt } for pid=8581 comm="syz.5.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.875711][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.6.933'. [ 171.008768][ T8608] loop6: detected capacity change from 0 to 512 [ 171.044096][ T8608] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 171.092320][ T8608] EXT4-fs (loop6): 1 truncate cleaned up [ 171.106791][ T8608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.147797][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.391019][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.6.946'. [ 171.429452][ T28] audit: type=1400 audit(2000000000.730:3276): avc: denied { ioctl } for pid=8601 comm="syz.7.936" path="socket:[17753]" dev="sockfs" ino=17753 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.691157][ T8637] netlink: 277 bytes leftover after parsing attributes in process `syz.6.949'. [ 171.774790][ T8641] loop6: detected capacity change from 0 to 128 [ 171.856260][ T8641] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.868592][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.926557][ T8641] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.060752][ T6143] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.179511][ T8650] loop6: detected capacity change from 0 to 512 [ 172.181573][ T28] audit: type=1400 audit(2000000001.480:3277): avc: denied { create } for pid=8651 comm="syz.7.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.207910][ T28] audit: type=1400 audit(2000000001.510:3278): avc: denied { ioctl } for pid=8651 comm="syz.7.953" path="socket:[17845]" dev="sockfs" ino=17845 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.233967][ T8650] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 172.277066][ T8650] EXT4-fs (loop6): 1 truncate cleaned up [ 172.283343][ T8650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.372411][ T8655] loop7: detected capacity change from 0 to 164 [ 172.387098][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.477747][ T8659] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 172.497772][ T8659] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 172.544592][ T8661] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.617457][ T8661] loop6: detected capacity change from 0 to 512 [ 172.677957][ T8661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.701819][ T8661] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.714831][ T8661] tmpfs: Unknown parameter 'inode31' [ 173.206168][ T28] audit: type=1400 audit(2000000002.500:3279): avc: denied { create } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 173.279313][ T28] audit: type=1400 audit(2000000002.580:3280): avc: denied { create } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 173.340459][ T28] audit: type=1400 audit(2000000002.610:3281): avc: denied { create } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 173.416293][ T28] audit: type=1400 audit(2000000002.610:3282): avc: denied { write } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 173.498027][ T28] audit: type=1400 audit(2000000002.610:3283): avc: denied { read } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 173.528471][ T8680] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 173.550697][ T28] audit: type=1400 audit(2000000002.630:3284): avc: denied { create } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 173.575749][ T8680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.589955][ T8684] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 173.599369][ T6143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.602910][ T28] audit: type=1400 audit(2000000002.670:3285): avc: denied { create } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 173.675127][ T28] audit: type=1400 audit(2000000002.670:3286): avc: denied { write } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 173.728436][ T8684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.795048][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 173.811223][ T28] audit: type=1400 audit(2000000002.680:3287): avc: denied { create } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 173.872552][ T28] audit: type=1400 audit(2000000002.680:3288): avc: denied { write } for pid=8675 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 173.963417][ T8698] loop6: detected capacity change from 0 to 1024 [ 173.970201][ T8698] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.980440][ T8698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.066247][ T8698] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.077463][ T8698] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.969: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 174.155241][ T8698] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.155508][ T8698] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.969: couldn't read orphan inode 11 (err -117) [ 174.164836][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 174.164852][ C0] EXT4-fs (loop6): initial error at time 2000000003: ext4_ext_check_inode:521: inode 11 [ 174.164877][ C0] EXT4-fs (loop6): last error at time 2000000003: ext4_ext_check_inode:521: inode 11 [ 174.216267][ T8698] loop6: lost filesystem error report for type 5 error -117 [ 174.217493][ T8698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.824403][ T8716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'. [ 174.991354][ T8716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.021123][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.052085][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.153545][ T8698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.197342][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.7.977'. [ 175.464863][ T8739] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 175.554985][ T8739] loop7: detected capacity change from 0 to 512 [ 175.893671][ T8739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.906759][ T8739] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.921484][ T8739] tmpfs: Unknown parameter 'inode31' [ 176.212437][ T8756] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.237779][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.6.982'. [ 176.285416][ T8756] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.419923][ T8756] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.484723][ T8756] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.662809][ T8768] loop4: detected capacity change from 0 to 128 [ 176.701247][ T8756] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.727276][ T8768] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 176.740497][ T8756] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.751720][ T8771] netlink: 'syz.5.987': attribute type 1 has an invalid length. [ 176.766723][ T8768] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.797237][ T8771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.818092][ T8756] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.843350][ T8756] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.857142][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.943144][ T2117] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.973900][ T2117] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.028142][ T2117] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.064107][ T2117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.118509][ T2117] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.158386][ T2117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.186302][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.210132][ T2117] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.263866][ T2117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.291615][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.991'. [ 177.348696][ T8793] 9p: Bad value for 'rfdno' [ 177.525410][ T8809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7953 sclass=netlink_route_socket pid=8809 comm=syz.6.999 [ 177.707607][ T8820] loop7: detected capacity change from 0 to 2048 [ 177.721229][ T8822] bond2: (slave Q6`Ҙ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.746882][ T8822] bond2: (slave Q6`Ҙ): Enslaving as an active interface with an up link [ 177.769041][ T8822] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 177.771783][ T8820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.816420][ T8820] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.848736][ T8833] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 177.900770][ T8833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.930489][ T8833] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 177.959710][ T8833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.003359][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.151520][ T8861] loop7: detected capacity change from 0 to 512 [ 178.177197][ T8861] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 178.220532][ T8861] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 178.236136][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 178.242587][ C0] EXT4-fs (loop7): initial error at time 2000000007: ext4_mb_generate_buddy:1317 [ 178.251754][ C0] EXT4-fs (loop7): last error at time 2000000007: ext4_mb_generate_buddy:1317 [ 178.263490][ T8861] EXT4-fs (loop7): 1 truncate cleaned up [ 178.269789][ T8861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.312907][ T8870] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 178.319382][ T8870] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 178.328809][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 178.328882][ T28] audit: type=1400 audit(2000000007.630:3297): avc: denied { link } for pid=8860 comm="syz.7.1015" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.378415][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.394158][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1018'. [ 178.446199][ T8881] loop7: detected capacity change from 0 to 512 [ 178.455471][ T8881] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.549873][ T8881] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 178.564414][ T8881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 178.572583][ T8881] EXT4-fs (loop7): orphan cleanup on readonly fs [ 178.573019][ T8889] loop4: detected capacity change from 0 to 512 [ 178.843507][ T8881] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1019: bg 0: block 361: padding at end of block bitmap is not set [ 178.858397][ T8889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.869144][ T8881] loop7: lost filesystem error report for type 5 error -117 [ 178.869311][ T8881] EXT4-fs (loop7): Remounting filesystem read-only [ 178.876621][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 178.876635][ C0] EXT4-fs (loop7): initial error at time 2000000008: ext4_validate_block_bitmap:441 [ 178.876668][ C0] EXT4-fs (loop7): last error at time 2000000008: ext4_validate_block_bitmap:441 [ 179.678961][ T8881] EXT4-fs (loop7): 1 truncate cleaned up [ 179.685187][ T8881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 179.700589][ T8889] EXT4-fs (loop4): 1 truncate cleaned up [ 179.706879][ T8889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.928745][ T8881] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1019: dx entry: limit 0 != root limit 125 [ 179.940931][ T8881] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1019: Corrupt directory, running e2fsck is recommended [ 180.641145][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.679219][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 182.306958][ T8934] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 182.317301][ T28] audit: type=1400 audit(2000000011.620:3298): avc: denied { relabelto } for pid=8918 comm="syz.2.1034" name="bus" dev="tmpfs" ino=1129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 182.346519][ T28] audit: type=1400 audit(2000000011.650:3299): avc: denied { associate } for pid=8918 comm="syz.2.1034" name="bus" dev="tmpfs" ino=1129 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 182.377731][ T28] audit: type=1400 audit(2000000011.680:3300): avc: denied { create } for pid=8938 comm="syz.6.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.429293][ T28] audit: type=1400 audit(2000000011.730:3301): avc: denied { write } for pid=8938 comm="syz.6.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.073701][ T8943] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 183.084444][ T8943] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 183.092762][ T8947] loop7: detected capacity change from 0 to 512 [ 183.126322][ T8947] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 183.155422][ T8958] lo speed is unknown, defaulting to 1000 [ 183.161786][ T8947] EXT4-fs (loop7): 1 truncate cleaned up [ 183.185958][ T8947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.201626][ T8958] lo speed is unknown, defaulting to 1000 [ 183.235214][ T8958] lo speed is unknown, defaulting to 1000 [ 183.260129][ T8968] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 183.273404][ T8958] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 183.295448][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.360570][ T8958] lo speed is unknown, defaulting to 1000 [ 183.387187][ T8978] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1055'. [ 183.399024][ T8968] tmpfs: Unknown parameter 'inode31' [ 183.424527][ T8958] lo speed is unknown, defaulting to 1000 [ 183.435774][ T8980] netlink: 'syz.5.1056': attribute type 1 has an invalid length. [ 183.462437][ T8958] lo speed is unknown, defaulting to 1000 [ 183.526976][ T8980] netlink: 'syz.5.1056': attribute type 1 has an invalid length. [ 183.535414][ T8958] lo speed is unknown, defaulting to 1000 [ 183.576308][ T8958] lo speed is unknown, defaulting to 1000 [ 183.638229][ T8965] syz.2.1050 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 183.656112][ T8965] CPU: 1 UID: 0 PID: 8965 Comm: syz.2.1050 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.656145][ T8965] Tainted: [W]=WARN [ 183.656152][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.656175][ T8965] Call Trace: [ 183.656182][ T8965] [ 183.656238][ T8965] __dump_stack+0x1d/0x30 [ 183.656362][ T8965] dump_stack_lvl+0x95/0xd0 [ 183.656386][ T8965] dump_stack+0x15/0x1b [ 183.656406][ T8965] dump_header+0x80/0x240 [ 183.656426][ T8965] oom_kill_process+0x295/0x350 [ 183.656521][ T8965] out_of_memory+0x97d/0xb80 [ 183.656541][ T8965] try_charge_memcg+0x62e/0xa10 [ 183.656576][ T8965] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 183.656682][ T8965] __swap_cache_prepare_and_add+0x67/0x460 [ 183.656711][ T8965] ? alloc_pages_mpol+0x217/0x260 [ 183.656739][ T8965] swap_cache_alloc_folio+0xa2/0x120 [ 183.656772][ T8965] swap_cluster_readahead+0x26e/0x3d0 [ 183.656814][ T8965] swapin_readahead+0xde/0x840 [ 183.656868][ T8965] ? __rcu_read_unlock+0x4e/0x70 [ 183.656889][ T8965] ? __perf_event_task_sched_in+0xa65/0xad0 [ 183.656911][ T8965] ? __list_add_valid_or_report+0x38/0xe0 [ 183.656935][ T8965] ? __rcu_read_unlock+0x4e/0x70 [ 183.656953][ T8965] ? swap_cache_get_folio+0x26f/0x280 [ 183.657044][ T8965] do_swap_page+0x2fe/0x21e0 [ 183.657075][ T8965] ? __schedule+0x93c/0xd40 [ 183.657234][ T8965] ? __rcu_read_lock+0x36/0x50 [ 183.657379][ T8965] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 183.657408][ T8965] handle_mm_fault+0xb46/0x3020 [ 183.657441][ T8965] ? vma_start_read+0x1c7/0x2c0 [ 183.657521][ T8965] do_user_addr_fault+0x62f/0x1050 [ 183.657628][ T8965] ? trace_page_fault_user+0x1f/0xe0 [ 183.657658][ T8965] exc_page_fault+0x62/0xa0 [ 183.657706][ T8965] asm_exc_page_fault+0x26/0x30 [ 183.657806][ T8965] RIP: 0033:0x7feccbd9a1cc [ 183.657824][ T8965] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 183.657856][ T8965] RSP: 002b:00007fffaf8ad020 EFLAGS: 00010206 [ 183.657908][ T8965] RAX: 0000000000000000 RBX: 00007feccc145fa0 RCX: 0000555592a61808 [ 183.657923][ T8965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.657963][ T8965] RBP: 00007feccc147da0 R08: 0000000000000000 R09: 0000000000000000 [ 183.658023][ T8965] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002cef5 [ 183.658034][ T8965] R13: 00007feccc14609c R14: 000000000002ccd0 R15: 00007feccc146090 [ 183.658055][ T8965] [ 183.664813][ T8965] memory: usage 271308kB, limit 307200kB, failcnt 328 [ 183.925283][ T8965] memory+swap: usage 99632kB, limit 9007199254740988kB, failcnt 0 [ 183.933562][ T8965] kmem: usage 96648kB, limit 9007199254740988kB, failcnt 0 [ 183.941188][ T8965] Memory cgroup stats for /syz2: [ 183.941465][ T8965] cache 81920 [ 183.949909][ T8965] rss 4096 [ 183.952982][ T8965] shmem 0 [ 183.958779][ T8965] mapped_file 65536 [ 183.962723][ T8965] dirty 0 [ 183.966025][ T8965] writeback 8192 [ 183.969625][ T8965] workingset_refault_anon 250 [ 184.139941][ T28] audit: type=1400 audit(2000000013.340:3302): avc: denied { append } for pid=8972 comm="syz.4.1053" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 184.215479][ T8965] workingset_refault_file 1936 [ 184.328739][ T8965] swap 1953792 [ 184.360122][ T8965] swapcached 3649536 [ 184.380766][ T8965] pgpgin 183833 [ 184.416219][ T8965] pgpgout 183806 [ 184.419865][ T8965] pgfault 164957 [ 184.423537][ T8965] pgmajfault 110 [ 184.427362][ T8965] inactive_anon 28672 [ 184.432086][ T8965] active_anon 0 [ 184.447167][ T8965] inactive_file 0 [ 184.474173][ T8965] active_file 81920 [ 184.497014][ T8965] unevictable 0 [ 184.505830][ T28] audit: type=1400 audit(2000000013.740:3303): avc: denied { ioctl } for pid=8995 comm="syz.6.1059" path="socket:[19568]" dev="sockfs" ino=19568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.543532][ T8965] hierarchical_memory_limit 314572800 [ 184.587478][ T8965] hierarchical_memsw_limit 9223372036854771712 [ 184.603427][ T28] audit: type=1400 audit(2000000013.740:3304): avc: denied { connect } for pid=8995 comm="syz.6.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.661843][ T8965] total_cache 81920 [ 184.698173][ T8965] total_rss 4096 [ 184.706275][ T28] audit: type=1400 audit(2000000013.740:3305): avc: denied { write } for pid=8995 comm="syz.6.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.750468][ T8965] total_shmem 0 [ 184.790307][ T8965] total_mapped_file 65536 [ 184.794674][ T8965] total_dirty 0 [ 184.847060][ T8965] total_writeback 8192 [ 184.851313][ T8965] total_workingset_refault_anon 250 [ 184.891183][ T9002] loop7: detected capacity change from 0 to 512 [ 184.925765][ T8965] total_workingset_refault_file 1936 [ 184.931507][ T8965] total_swap 1953792 [ 184.935538][ T8965] total_swapcached 3649536 [ 184.946229][ T9002] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.954554][ T8965] total_pgpgin 183833 [ 184.961502][ T8965] total_pgpgout 183806 [ 184.966024][ T8965] total_pgfault 164957 [ 184.970416][ T8965] total_pgmajfault 110 [ 184.974735][ T8965] total_inactive_anon 28672 [ 184.984751][ T8965] total_active_anon 0 [ 184.990112][ T8965] total_inactive_file 0 [ 184.994754][ T8965] total_active_file 81920 [ 184.999660][ T8965] total_unevictable 0 [ 185.004028][ T8965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.78,pid=3966,uid=0 [ 185.026408][ T8965] Memory cgroup out of memory: Killed process 3966 (syz.2.78) total-vm:96212kB, anon-rss:1232kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 185.026757][ T9002] EXT4-fs (loop7): 1 truncate cleaned up [ 185.086098][ T9002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.183083][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.238177][ T28] audit: type=1400 audit(2000000014.540:3306): avc: denied { ioctl } for pid=9017 comm="syz.4.1065" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.238746][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 185.319637][ T28] audit: type=1400 audit(2000000014.590:3307): avc: denied { bind } for pid=9019 comm="syz.7.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.345183][ T28] audit: type=1400 audit(2000000014.640:3308): avc: denied { mount } for pid=9023 comm="syz.2.1066" name="/" dev="hugetlbfs" ino=19621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 185.391620][ T9030] netlink: 'syz.4.1070': attribute type 21 has an invalid length. [ 185.403300][ T28] audit: type=1400 audit(2000000014.700:3309): avc: denied { setopt } for pid=9027 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.407898][ T9032] loop7: detected capacity change from 0 to 512 [ 185.480839][ T9028] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.494507][ T9032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.507615][ T9032] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.518874][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1070'. [ 185.528154][ T9030] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 185.593198][ T9028] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.722036][ T9028] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.753927][ T9053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9053 comm=syz.5.1075 [ 185.817152][ T9028] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.886092][ T9058] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1076'. [ 186.020101][ T2117] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.067437][ T2117] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.111882][ T2117] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.144828][ T4084] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.154064][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 186.192810][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 186.254850][ T9077] loop4: detected capacity change from 0 to 512 [ 186.274104][ T9077] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.274121][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1083'. [ 186.301700][ T9079] xt_policy: output policy not valid in PREROUTING and INPUT [ 186.396436][ T9084] loop4: detected capacity change from 0 to 512 [ 186.411050][ T9086] tmpfs: Unknown parameter 'ize' [ 186.411504][ T9084] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.431930][ T9084] EXT4-fs (loop4): 1 truncate cleaned up [ 186.438509][ T9084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.465996][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.497213][ T9091] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1087'. [ 186.884435][ T9109] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 187.027808][ T28] audit: type=1326 audit(2000000016.320:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111645c819 code=0x7ffc0000 [ 187.187492][ T9118] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1096'. [ 187.201252][ T28] audit: type=1326 audit(2000000016.320:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f111645c819 code=0x7ffc0000 [ 187.281142][ T9122] hsr0: entered promiscuous mode [ 187.708853][ T9122] netlink: 'syz.2.1098': attribute type 16 has an invalid length. [ 187.717350][ T9122] netlink: 'syz.2.1098': attribute type 3 has an invalid length. [ 187.735489][ T9122] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1098'. [ 188.426897][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.198548][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 189.198563][ T28] audit: type=1400 audit(2000000018.501:3361): avc: denied { unmount } for pid=9174 comm="syz.5.1112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 189.307856][ T9188] batadv_slave_1: entered promiscuous mode [ 189.345797][ T9173] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1111'. [ 189.367096][ T9172] batadv_slave_1: left promiscuous mode [ 189.490213][ T9204] 9p: Bad value for 'rfdno' [ 190.278492][ T9241] loop7: detected capacity change from 0 to 512 [ 190.345631][ T9241] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 190.394520][ T9251] loop4: detected capacity change from 0 to 4096 [ 190.404462][ T9241] EXT4-fs (loop7): 1 truncate cleaned up [ 190.411452][ T9241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.534566][ T9260] 9p: Bad value for 'rfdno' [ 190.539712][ T9260] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 190.548108][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.731914][ T9262] loop7: detected capacity change from 0 to 128 [ 190.861648][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1138'. [ 191.015687][ T35] IPVS: starting estimator thread 0... [ 191.125308][ T9311] IPVS: using max 2400 ests per chain, 120000 per kthread [ 191.160609][ T9339] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 191.178701][ T9339] tmpfs: Unknown parameter 'inode31' [ 191.201365][ T9342] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 191.270487][ T9342] tmpfs: Unknown parameter 'inode31' [ 191.799139][ T9342] syz.2.1149 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 191.825526][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.2.1149 Tainted: G W syzkaller #0 PREEMPT(full) [ 191.825573][ T9342] Tainted: [W]=WARN [ 191.825650][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.825663][ T9342] Call Trace: [ 191.825673][ T9342] [ 191.825682][ T9342] __dump_stack+0x1d/0x30 [ 191.825710][ T9342] dump_stack_lvl+0x95/0xd0 [ 191.825739][ T9342] dump_stack+0x15/0x1b [ 191.825758][ T9342] dump_header+0x80/0x240 [ 191.825780][ T9342] oom_kill_process+0x295/0x350 [ 191.825804][ T9342] out_of_memory+0x97d/0xb80 [ 191.825828][ T9342] try_charge_memcg+0x62e/0xa10 [ 191.825905][ T9342] obj_cgroup_charge_pages+0x23/0xc0 [ 191.825935][ T9342] __memcg_kmem_charge_page+0x9e/0x170 [ 191.825965][ T9342] __alloc_frozen_pages_noprof+0x18a/0x360 [ 191.826042][ T9342] alloc_pages_mpol+0xb3/0x260 [ 191.826072][ T9342] alloc_pages_noprof+0x8f/0x140 [ 191.826097][ T9342] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 191.826132][ T9342] __kvmalloc_node_noprof+0x3d4/0x650 [ 191.826231][ T9342] ? futex_hash_allocate+0x190/0x9d0 [ 191.826309][ T9342] ? futex_hash_allocate+0x190/0x9d0 [ 191.826367][ T9342] futex_hash_allocate+0x190/0x9d0 [ 191.826398][ T9342] ? cap_task_prctl+0x13f/0x6e0 [ 191.826429][ T9342] futex_hash_prctl+0xd8/0xf0 [ 191.826457][ T9342] __se_sys_prctl+0x4f4/0x1400 [ 191.826548][ T9342] __x64_sys_prctl+0x67/0x80 [ 191.826569][ T9342] x64_sys_call+0x2533/0x3020 [ 191.826647][ T9342] do_syscall_64+0x12c/0x3b0 [ 191.826749][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.826772][ T9342] RIP: 0033:0x7feccbecc819 [ 191.826816][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.826886][ T9342] RSP: 002b:00007fecca91f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 191.826908][ T9342] RAX: ffffffffffffffda RBX: 00007feccc145fa0 RCX: 00007feccbecc819 [ 191.826923][ T9342] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 191.826937][ T9342] RBP: 00007feccbf62c91 R08: 0000000000000000 R09: 0000000000000000 [ 191.826949][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.826960][ T9342] R13: 00007feccc146038 R14: 00007feccc145fa0 R15: 00007fffaf8aceb8 [ 191.826977][ T9342] [ 191.826992][ T9342] memory: usage 307200kB, limit 307200kB, failcnt 695 [ 192.067430][ T9342] memory+swap: usage 103812kB, limit 9007199254740988kB, failcnt 0 [ 192.075842][ T9342] kmem: usage 102048kB, limit 9007199254740988kB, failcnt 0 [ 192.085381][ T9342] Memory cgroup stats for /syz2: [ 192.085714][ T9342] cache 0 [ 192.104226][ T9342] rss 0 [ 192.114147][ T9342] shmem 0 [ 192.117715][ T9342] mapped_file 0 [ 192.130773][ T9342] dirty 0 [ 192.139711][ T9342] writeback 0 [ 192.155116][ T9342] workingset_refault_anon 315 [ 192.169602][ T9342] workingset_refault_file 2107 [ 192.191393][ T9342] swap 1794048 [ 192.197884][ T9342] swapcached 4415488 [ 192.226359][ T9342] pgpgin 194196 [ 192.241492][ T9342] pgpgout 194196 [ 192.245139][ T9342] pgfault 176426 [ 192.262789][ T9342] pgmajfault 140 [ 192.277056][ T9342] inactive_anon 0 [ 192.294168][ T9342] active_anon 0 [ 192.300449][ T9342] inactive_file 0 [ 192.324517][ T9342] active_file 0 [ 192.329291][ T9342] unevictable 0 [ 192.333647][ T9342] hierarchical_memory_limit 314572800 [ 192.345657][ T9342] hierarchical_memsw_limit 9223372036854771712 [ 192.380273][ T9342] total_cache 0 [ 192.383949][ T9342] total_rss 0 [ 192.400281][ T9342] total_shmem 0 [ 192.403862][ T9342] total_mapped_file 0 [ 192.495357][ T9342] total_dirty 0 [ 192.499022][ T9342] total_writeback 0 [ 192.505353][ T9342] total_workingset_refault_anon 315 [ 192.523058][ T9342] total_workingset_refault_file 2107 [ 192.532017][ T9342] total_swap 1794048 [ 192.540658][ T9342] total_swapcached 4415488 [ 192.549877][ T9342] total_pgpgin 194196 [ 192.557594][ T9342] total_pgpgout 194196 [ 192.564986][ T9342] total_pgfault 176426 [ 192.575467][ T9342] total_pgmajfault 140 [ 192.611016][ T9342] total_inactive_anon 0 [ 192.635257][ T9342] total_active_anon 0 [ 192.661275][ T9342] total_inactive_file 0 [ 192.665891][ T9342] total_active_file 0 [ 192.669924][ T9342] total_unevictable 0 [ 192.673983][ T9342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.174,pid=4438,uid=0 [ 192.701239][ T9342] Memory cgroup out of memory: Killed process 4438 (syz.2.174) total-vm:96212kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 194.243712][ T9452] bond2: (slave Q6`Ҙ): Releasing backup interface [ 194.274171][ T9452] bond2: (slave Q6`Ҙ): last VLAN challenged slave left bond - VLAN blocking is removed [ 194.376151][ T9452] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 194.675762][ T9469] 9p: Bad value for 'rfdno' [ 194.830250][ T9473] loop4: detected capacity change from 0 to 4096 [ 194.972421][ T28] audit: type=1400 audit(2000000024.271:3362): avc: denied { bind } for pid=9478 comm="syz.5.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.005222][ T9483] 9p: Bad value for 'rfdno' [ 195.183937][ T28] audit: type=1400 audit(2000000024.301:3363): avc: denied { name_bind } for pid=9478 comm="syz.5.1166" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 195.235087][ T28] audit: type=1400 audit(2000000024.301:3364): avc: denied { node_bind } for pid=9478 comm="syz.5.1166" saddr=172.30.1.6 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 195.240291][ T9480] lo speed is unknown, defaulting to 1000 [ 195.385195][ T9483] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 195.592283][ T9514] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 195.947632][ T9545] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1173'. [ 195.966290][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1173'. [ 196.019929][ T28] audit: type=1400 audit(2000000025.321:3365): avc: denied { search } for pid=9566 comm="syz.5.1175" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 196.072361][ T28] audit: type=1400 audit(2000000025.321:3366): avc: denied { search } for pid=9566 comm="syz.5.1175" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 196.124252][ T28] audit: type=1400 audit(2000000025.321:3367): avc: denied { read open } for pid=9566 comm="syz.5.1175" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 196.224874][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 196.251537][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 196.818884][ T9649] loop4: detected capacity change from 0 to 512 [ 196.845527][ T9649] ext4: Unknown parameter 'subj_role' [ 196.887465][ T9648] lo speed is unknown, defaulting to 1000 [ 197.058756][ T9662] loop7: detected capacity change from 0 to 164 [ 197.072565][ T28] audit: type=1400 audit(2000000026.371:3368): avc: denied { mount } for pid=9660 comm="syz.7.1192" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 197.072667][ T9656] loop4: detected capacity change from 0 to 1024 [ 197.112936][ T9656] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.153498][ T28] audit: type=1400 audit(2000000026.441:3369): avc: denied { unmount } for pid=6467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 197.176945][ T9656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.197210][ T9656] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.218808][ T9656] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.1191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 197.264934][ T9656] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.265092][ T9656] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1191: couldn't read orphan inode 11 (err -117) [ 197.286159][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 197.286177][ C1] EXT4-fs (loop4): initial error at time 2000000026: ext4_ext_check_inode:521: inode 11 [ 197.286203][ C1] EXT4-fs (loop4): last error at time 2000000026: ext4_ext_check_inode:521: inode 11 [ 197.311843][ T9656] loop4: lost filesystem error report for type 5 error -117 [ 197.312421][ T9656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.347995][ T9656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.507054][ T28] audit: type=1400 audit(2000000026.811:3370): avc: denied { getopt } for pid=9682 comm="syz.7.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.645839][ T9698] 9p: Bad value for 'rfdno' [ 197.656265][ T9698] !yz2: rxe_newlink: already configured on veth0_to_batadv [ 197.666862][ T9701] sctp: [Deprecated]: syz.2.1200 (pid 9701) Use of int in max_burst socket option deprecated. [ 197.666862][ T9701] Use struct sctp_assoc_value instead [ 197.751619][ T9700] sctp: [Deprecated]: syz.2.1200 (pid 9700) Use of int in max_burst socket option deprecated. [ 197.751619][ T9700] Use struct sctp_assoc_value instead [ 197.846255][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1201'. [ 197.975983][ T9737] netlink: 'syz.5.1205': attribute type 14 has an invalid length. [ 197.986995][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1205'. [ 198.003142][ T4082] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.012112][ T4082] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.032572][ T9737] netlink: 'syz.5.1205': attribute type 14 has an invalid length. [ 198.037012][ T4082] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.040738][ T28] audit: type=1400 audit(2000000027.331:3371): avc: denied { read } for pid=9673 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.056836][ T4082] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.069579][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1205'. [ 198.507786][ T9802] lo speed is unknown, defaulting to 1000 [ 198.540487][ T9808] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 198.571086][ T9808] loop7: detected capacity change from 0 to 512 [ 198.606668][ T9808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.619634][ T9808] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.632983][ T9808] tmpfs: Unknown parameter 'inode31' [ 199.201897][ T9869] bridge0: entered promiscuous mode [ 199.208061][ T9869] macsec1: entered promiscuous mode [ 199.294869][ T6467] ================================================================== [ 199.303077][ T6467] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 199.312893][ T6467] [ 199.315207][ T6467] read-write to 0xffffffff86e09a00 of 8 bytes by interrupt on cpu 0: [ 199.323263][ T6467] tick_do_update_jiffies64+0x113/0x1c0 [ 199.328854][ T6467] tick_nohz_handler+0x8d/0x3d0 [ 199.333713][ T6467] __hrtimer_run_queues+0x218/0x4f0 [ 199.338920][ T6467] hrtimer_interrupt+0x275/0x810 [ 199.343864][ T6467] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 199.349762][ T6467] sysvec_apic_timer_interrupt+0x6f/0x80 [ 199.355483][ T6467] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.361457][ T6467] shrink_folio_list+0x3a0/0x2820 [ 199.366489][ T6467] evict_folios+0x2a60/0x35c0 [ 199.371156][ T6467] try_to_shrink_lruvec+0x81b/0xbf0 [ 199.376349][ T6467] shrink_lruvec+0x255/0x1c60 [ 199.381022][ T6467] shrink_node+0x67a/0x2130 [ 199.385514][ T6467] do_try_to_free_pages+0x408/0xc80 [ 199.390707][ T6467] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 199.396597][ T6467] try_charge_memcg+0x37e/0xa10 [ 199.401466][ T6467] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 199.407541][ T6467] __swap_cache_prepare_and_add+0x67/0x460 [ 199.413446][ T6467] swap_cache_alloc_folio+0xa2/0x120 [ 199.418768][ T6467] swap_cluster_readahead+0x36b/0x3d0 [ 199.424166][ T6467] shmem_swapin_folio+0x951/0x1360 [ 199.429272][ T6467] shmem_get_folio_gfp+0x278/0xd60 [ 199.434375][ T6467] shmem_write_begin+0xfc/0x1f0 [ 199.439223][ T6467] generic_perform_write+0x183/0x490 [ 199.444500][ T6467] shmem_file_write_iter+0xc5/0xf0 [ 199.449704][ T6467] lo_rw_aio+0x67d/0x730 [ 199.453936][ T6467] loop_process_work+0x56c/0xac0 [ 199.458864][ T6467] loop_rootcg_workfn+0x22/0x30 [ 199.463706][ T6467] process_scheduled_works+0x513/0xa10 [ 199.469168][ T6467] worker_thread+0x58a/0x780 [ 199.473755][ T6467] kthread+0x22a/0x280 [ 199.477895][ T6467] ret_from_fork+0x146/0x330 [ 199.482481][ T6467] ret_from_fork_asm+0x1a/0x30 [ 199.487238][ T6467] [ 199.489556][ T6467] read to 0xffffffff86e09a00 of 8 bytes by task 6467 on cpu 1: [ 199.497085][ T6467] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 199.503433][ T6467] count_shadow_nodes+0x6a/0x230 [ 199.508389][ T6467] do_shrink_slab+0x63/0x6a0 [ 199.513053][ T6467] shrink_slab+0x538/0x880 [ 199.517548][ T6467] shrink_node+0x6bc/0x2130 [ 199.522127][ T6467] do_try_to_free_pages+0x408/0xc80 [ 199.527322][ T6467] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 199.533482][ T6467] try_charge_memcg+0x37e/0xa10 [ 199.538335][ T6467] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 199.544397][ T6467] __swap_cache_prepare_and_add+0x67/0x460 [ 199.550369][ T6467] swap_cache_alloc_folio+0xa2/0x120 [ 199.555753][ T6467] swap_cluster_readahead+0x36b/0x3d0 [ 199.561120][ T6467] swapin_readahead+0xde/0x840 [ 199.565874][ T6467] do_swap_page+0x2fe/0x21e0 [ 199.570487][ T6467] handle_mm_fault+0xb46/0x3020 [ 199.575333][ T6467] do_user_addr_fault+0x62f/0x1050 [ 199.580479][ T6467] exc_page_fault+0x62/0xa0 [ 199.584993][ T6467] asm_exc_page_fault+0x26/0x30 [ 199.589831][ T6467] [ 199.592159][ T6467] value changed: 0x00000000ffffd877 -> 0x00000000ffffd878 [ 199.599245][ T6467] [ 199.601639][ T6467] Reported by Kernel Concurrency Sanitizer on: [ 199.607771][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 199.618781][ T6467] Tainted: [W]=WARN [ 199.622597][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.632638][ T6467] ================================================================== [ 199.649129][ T2117] kworker/u8:8 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 199.665994][ T2117] CPU: 1 UID: 0 PID: 2117 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 199.666025][ T2117] Tainted: [W]=WARN [ 199.666031][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.666064][ T2117] Workqueue: loop7 loop_rootcg_workfn [ 199.666094][ T2117] Call Trace: [ 199.666101][ T2117] [ 199.666108][ T2117] __dump_stack+0x1d/0x30 [ 199.666134][ T2117] dump_stack_lvl+0x95/0xd0 [ 199.666208][ T2117] dump_stack+0x15/0x1b [ 199.666228][ T2117] dump_header+0x80/0x240 [ 199.666252][ T2117] oom_kill_process+0x295/0x350 [ 199.666371][ T2117] out_of_memory+0x97d/0xb80 [ 199.666395][ T2117] try_charge_memcg+0x62e/0xa10 [ 199.666435][ T2117] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 199.666497][ T2117] __swap_cache_prepare_and_add+0x67/0x460 [ 199.666528][ T2117] ? alloc_pages_mpol+0x217/0x260 [ 199.666622][ T2117] swap_cache_alloc_folio+0xa2/0x120 [ 199.666648][ T2117] swap_cluster_readahead+0x36b/0x3d0 [ 199.666720][ T2117] shmem_swapin_folio+0x951/0x1360 [ 199.666825][ T2117] ? __rcu_read_unlock+0x4e/0x70 [ 199.666846][ T2117] ? filemap_get_entry+0x392/0x3d0 [ 199.666872][ T2117] shmem_get_folio_gfp+0x278/0xd60 [ 199.666900][ T2117] shmem_write_begin+0xfc/0x1f0 [ 199.667026][ T2117] generic_perform_write+0x183/0x490 [ 199.667053][ T2117] shmem_file_write_iter+0xc5/0xf0 [ 199.667145][ T2117] lo_rw_aio+0x67d/0x730 [ 199.667173][ T2117] loop_process_work+0x56c/0xac0 [ 199.667200][ T2117] ? wb_workfn+0x857/0x970 [ 199.667270][ T2117] ? pwq_dec_nr_in_flight+0x65c/0x760 [ 199.667296][ T2117] loop_rootcg_workfn+0x22/0x30 [ 199.667341][ T2117] process_scheduled_works+0x513/0xa10 [ 199.667368][ T2117] worker_thread+0x58a/0x780 [ 199.667399][ T2117] ? __pfx_worker_thread+0x10/0x10 [ 199.667482][ T2117] kthread+0x22a/0x280 [ 199.667500][ T2117] ? __pfx_kthread+0x10/0x10 [ 199.667518][ T2117] ret_from_fork+0x146/0x330 [ 199.667549][ T2117] ? __pfx_kthread+0x10/0x10 [ 199.667568][ T2117] ret_from_fork_asm+0x1a/0x30 [ 199.667690][ T2117] [ 199.667697][ T2117] memory: usage 307200kB, limit 307200kB, failcnt 723 [ 199.872441][ T9875] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1222'. [ 199.883389][ T2117] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 199.891363][ T2117] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 199.898822][ T2117] Memory cgroup stats for /syz7: [ 199.899045][ T2117] cache 24576 [ 199.908075][ T2117] rss 0 [ 199.910841][ T2117] shmem 0 [ 199.913808][ T2117] mapped_file 0 [ 199.917305][ T2117] dirty 0 [ 199.920394][ T2117] writeback 16384 [ 199.924140][ T2117] workingset_refault_anon 175 [ 199.928851][ T2117] workingset_refault_file 1 [ 199.933663][ T2117] swap 483328 [ 199.937392][ T2117] swapcached 3776512 [ 199.941288][ T2117] pgpgin 101450 [ 199.944859][ T2117] pgpgout 101443 [ 199.948398][ T2117] pgfault 73937 [ 199.951852][ T2117] pgmajfault 66 [ 199.955459][ T2117] inactive_anon 4096 [ 199.959350][ T2117] active_anon 0 [ 199.962810][ T2117] inactive_file 24576 [ 199.966858][ T2117] active_file 0 [ 199.970338][ T2117] unevictable 0 [ 199.973809][ T2117] hierarchical_memory_limit 314572800 [ 199.979210][ T2117] hierarchical_memsw_limit 9223372036854771712 [ 200.020937][ T2117] total_cache 24576 [ 200.025001][ T2117] total_rss 0 [ 200.028285][ T2117] total_shmem 0 [ 200.031854][ T2117] total_mapped_file 0 [ 200.035869][ T2117] total_dirty 0 [ 200.039323][ T2117] total_writeback 16384 [ 200.043497][ T2117] total_workingset_refault_anon 175 [ 200.049617][ T2117] total_workingset_refault_file 1 [ 200.054686][ T2117] total_swap 483328 [ 200.058572][ T2117] total_swapcached 3776512 [ 200.069192][ T2117] total_pgpgin 101450 [ 200.073216][ T2117] total_pgpgout 101443 [ 200.084053][ T2117] total_pgfault 73937 [ 200.088207][ T2117] total_pgmajfault 66 [ 200.092416][ T2117] total_inactive_anon 4096 [ 200.096859][ T2117] total_active_anon 0 [ 200.100901][ T2117] total_inactive_file 24576 [ 200.112690][ T2117] total_active_file 0 [ 200.117338][ T2117] total_unevictable 0 [ 200.121433][ T2117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1212,pid=9807,uid=0 [ 200.138579][ T2117] Memory cgroup out of memory: Killed process 9807 (syz.7.1212) total-vm:161748kB, anon-rss:1228kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 200.259375][ T6467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.414589][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!